Cyber Security Engineering: A Practical Approach for Systems and Software Assurance

Chapter 5. Performing Gap Analysis

with Tom Hilburn

In This Chapter

• 5.1 Introduction

• 5.2 Using the SEI’s SwA Competency Model

• 5.3 Using the BSIMM

• 5.4 Summary

5.1 Introduction

The preceding chapters present a number of management (organizational) and engineering capability and competency models. These models can be used effectively at the management and engineering levels to perform gap analysis and lay out an improvement plan.

The first task to be completed is selecting a model or models for this purpose. One strategy might be to pick one model at the management level and a second model at the engineering level. A slightly different approach might be to pick one model at the organizational level and a second model for individuals to ...