SSE-CMM Implementation Activities
Acquired SSE-CMM certified Technical Support (PRIME Contract)
- PRIME required a level three SW CMM and sought SSE-CMM experienced vendor
- Establish Information System Security Program (ISSP) standards and Procedures (S&Ps) based on SSE-CMM Base Practice Areas (14) and developing other S&Ps as needed
- ISSP S&Ps evaluated as part Program ISO 9001 registration - Achieved registration May 1999
- Initiated SSE-CMM as part of earned valued system used to measure the PRIME’s progress
USAID was a testbed for an interagency (NSA, DISA) SSE-CMM evaluation activity