The System Security Engineering Capability Maturity Model (SSE-CMM) is a process-oriented methodology used to develop secure systems based on the Software Engineering Capability Maturity Model.

The SSE-CMM is a general framework for executing security engineering inside an organization; if possible in conjunction with some manufacturing CMMs. SSE-CMM defines the goals and the activities contained in such processes, is achieved from implementing these activities and the maturity of the procedure.

The SSE-CMM model describes the essential characteristics of an engineering security process that should exist in an organization in order to ensure good security engineering practices. It provides a way to assess and improve capability in the application of security engineering principles, and addresses capability-based assurance.

Definition of Systems Security Engineering Capability Maturity Model (SSE-CMM): Describes the essential characteristics of an organization’s security engineering process that must exist to ensure good security engineering.

The Systems Security Engineering Capability Maturity Model SSE-CMM describes the essential characteristics of an organizations security engineering process that must exist to ensure good security engineering. The SSE-CMM does not prescribe a particular process or sequence, but captures practices generally observed in industry.