IEEE Recommended Practice for Software Acquisition

Name: CERT Data Science in Cybersecurity Symposium 2018
Start: 2018-08-29T08:45:00-04:00
End: 2018-08-29T16:00:00-04:00
Location: Software Engineering Institute

Posted: 02/23/2002 | Leave a Comment

A set of useful quality practices that can be selected and applied during one or more steps in a software acquisition process is described. This recommended practice can be applied to software that runs on any computer system regardless of the size, complexity, or criticality of the software, but is more suited for use on modified-off-the-shelf software and fully developed software.

Standard Identifier: IEEE Std 1062-1998

Website: http://ieeexplore.ieee.org:80/Xplore/errorpage.jsp?reload=true

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Journal - Insider Threat and the Malicious Insider Threat

This issue of the CSIAC Journal presents five articles which represent different perspectives on Insider Threat and approaches to understand and remediate that threat.

Read the Journal

CSIAC Journal - Serious Games to Enhance Defense Capabilities

This 2017 special edition of the CSIAC Journal focuses on wargames and the many uses of Modeling and Simulation (M&S) that support decision making needed at the various levels of combat.

Read the Journal

CSIAC Reference Document - Recent Developments in Cyberlaw: 2018

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives a snapshot of the recent developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides focus on emerging issues such as cloud data storage, the scope of 3rd-party doctrine, encryption, warrants for electronic searches, and artificial intelligence.

Read the Document