Đang chuẩn bị nút TẢI XUỐNG, xin hãy chờ
Tải xuống
Ngoài ra SSE-CMM, các ứng cử viên ISSEP nên được nhận thức của mô hình lý tưởng của Carnegie Mellon Viện Công Nghệ Phần Mềm của. (Lý tưởng là viết tắt của Khởi, chẩn đoán, Xây dựng, Quyền, và học tập.) An ninh cải thiện quy trình kỹ thuật là một thành phần cơ bản của quản lý và duy trì các chương trình rity secu. | 602 Part II The Information Systems Security Engineering Professional ISSEP Concentration PA22 Coordinate with Suppliers The goal of this process area and the related best practices are Goal 1 Effective suppliers are selected and used. BP.22.01 Identify systems components or services. BP.22.02 Identify competent suppliers or vendors. BP.22.03 Choose suppliers or vendors. BP.22.04 Provide expectations. BP.22.05 Maintain communications. The IDEAL Model In addition to the SSE-CMM the ISSEP candidate should be aware of the Carnegie Mellon Software Engineering Institute s IDEAL model. IDEAL stands for Initiating Diagnosing Establishing Acting and Learning. Security engineering process improvement is a fundamental component of managing and maintaining the security program. Process Improvement The basic premise of process improvement is that the quality of services produced is a direct function of the quality of the associated development and maintenance processes. Knowledge of the basic principles of process change is required to implement a successful security engineering process improvement activity. The principles are Major changes must be sponsored by senior management. Focus on fixing the process not assigning blame. Understand the current process first. Change is continuous. Improvement requires investment. Retaining improvement requires periodic reinforcement. The goal is to establish a continuous cycle of evaluating the current status of your organization making improvements and repeating this cycle. The IDEAL model is shown in Table 13-2. Chapter 13 Technical Management 603 Table 13-2 The IDEAL Model Phase Description Activity I Initiating Laying the groundwork for a successful improvement effort D Diagnosing Determining where you are relative to where you want to be E Establishing Planning the specifics of how you will reach your destination A Acting Doing the work according to the plan L Learning Learning from the experience and improving your ability Each of
