A Common Sense Way to Make the Business Case for Software Assurance
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This article demonstrates how a true cost/benefit for secure software can be derived using three generic practice areas: (1) threat/risk understanding, (2) implementation of security requirements, and (3) operational security testing. Having an accurate cost for these aspects of the software assurance process would allow decision makers to make intelligent decisions about the level of investment they wish to make.
Cite This SEI Report
Drommi, A., Shoemaker, D., Ingalsbe, J., Bailey, J., & Mead, N. (2013, May 14). A Common Sense Way to Make the Business Case for Software Assurance. Retrieved September 19, 2026, from https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/.
@techreport{drommi_2013,
author={Drommi, Antonio and Shoemaker, Dan and Ingalsbe, Jeff and Bailey, John and Mead, Nancy},
title={A Common Sense Way to Make the Business Case for Software Assurance},
month={May},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/},
note={Accessed: 2026-Sep-19}
}
Drommi, Antonio, Dan Shoemaker, Jeff Ingalsbe, John Bailey, and Nancy Mead. "A Common Sense Way to Make the Business Case for Software Assurance." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, May 14, 2013. https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/.
A. Drommi, D. Shoemaker, J. Ingalsbe, J. Bailey, and N. Mead, "A Common Sense Way to Make the Business Case for Software Assurance," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 14-May-2013 [Online]. Available: https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/. [Accessed: 19-Sep-2026].
Drommi, Antonio, Dan Shoemaker, Jeff Ingalsbe, John Bailey, and Nancy Mead. "A Common Sense Way to Make the Business Case for Software Assurance." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 14 May. 2013. https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/. Accessed 19 Sep. 2026.
Drommi, Antonio; Shoemaker, Dan; Ingalsbe, Jeff; Bailey, John; & Mead, Nancy. A Common Sense Way to Make the Business Case for Software Assurance. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/a-common-sense-way-to-make-the-business-case-for-software-assurance/