sei.cmu

A Guide to the Convergence of Electronic Warfare and Cyber Operations

McIlvenny, J. (2026, July 14). A Guide to the Convergence of Electronic Warfare and Cyber Operations. Retrieved July 20, 2026, from https://doi.org/10.58012/ssy8-4t48 ...
sei.cmu

SEI and Accenture Release AI Adoption Maturity Model to Help Organizations Scale AI with Predictable Outcomes

PITTSBURGH, Pa., June 8, 2026—The Carnegie Mellon University Software Engineering Institute (SEI) and Accenture today released the Artificial Intelligence (AI) Adoption Maturity Model, an empirically ...
sei.cmu

Ensuring the Safety and Security of AI Systems

Artificial intelligence (AI) systems offer tremendous potential, but compared to traditional software, they introduce novel safety and security risks. System theory provides a powerful lens for ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 20, 2026 ...
sei.cmu

SEI Study on Defense Department DevSecOps Finds Excellence and Opportunities

May 12, 2025—DevSecOps practices foster collaboration among software development, security, and operations teams to build, test, and release software quickly and reliably. A high-stakes, high-security ...
sei.cmu

The DevSecOps Capability Maturity Model

Chick, T., Frye, B., and Reffett, A., 2025: The DevSecOps Capability Maturity Model. Software Engineering Institute blog, Accessed July 22, 2026, https://doi.org/10. ...
sei.cmu

Security Engineering Framework (SEF): Managing Security and Resilience Risks Across the Systems Lifecycle

Software is a growing component of modern business- and mission-critical systems. As a result, software assurance is becoming increasingly important to organizations across all sectors. A key aspect ...
sei.cmu

The Top 10 Skills CISOs Need in 2024

Touhill, G., 2024: The Top 10 Skills CISOs Need in 2024. Software Engineering Institute blog, Accessed July 21, 2026, https://doi.org/10.58012/tphr-nz17. The role of ...
sei.cmu

Creating a Large Language Model Application Using Gradio

Brooks, T., 2023: Creating a Large Language Model Application Using Gradio. Software Engineering Institute blog, Accessed July 20, 2026, https://doi.org/10.58012/7mv7 ...
sei.cmu

The 13 Key Elements of an Insider Threat Program

Costa, D., and Trzeciak, R., 2023: The 13 Key Elements of an Insider Threat Program. Software Engineering Institute blog, Accessed July 10, 2026, https://doi.org/10. ...
sei.cmu

Secure Software by Design 2023

SEI Secure Software by Design is intended to improve the state of this holistic secure development approach by bringing together thought leaders in this area for presentations and discussions on all ...
sei.cmu

Designing Vultron: A Protocol for Multi-Party Coordinated Vulnerability Disclosure (MPCVD)

The Coordinated Vulnerability Disclosure (CVD) process addresses a human coordination problem that spans individuals and organizations. In this report, we propose a formal protocol specification for ...