Software Security Engineering: A Guide for Project Managers (white paper)

SEI Report
In this guide, the authors discuss our reliance on software and systems that use the internet or internet-exposed private networks.
Publisher

Software Engineering Institute

Abstract

Software is ubiquitous. Many of the products, services, and processes organizations use and offer are highly dependent on software to handle the sensitive and high-value data on which people’s privacy, livelihoods, and very lives depend. National security—and by extension citizens’ personal safety—relies on increasingly complex, interconnected, software-intensive information systems—systems that in many cases use the Internet or Internet-exposed private networks as their means for communication and transporting data.

Cite This SEI Report

McGraw, G., Allen, J., Mead, N., Ellison, R., & Barnum, S. (2013, May 13). Software Security Engineering: A Guide for Project Managers (white paper). Retrieved August 16, 2026, from https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/.

@techreport{mcgraw_2013,
author={McGraw, Gary and Allen, Julia and Mead, Nancy and Ellison, Robert and Barnum, Sean},
title={Software Security Engineering: A Guide for Project Managers (white paper)},
month={May},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/},
note={Accessed: 2026-Aug-16}
}

McGraw, Gary, Julia Allen, Nancy Mead, Robert Ellison, and Sean Barnum. "Software Security Engineering: A Guide for Project Managers (white paper)." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, May 13, 2013. https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/.

G. McGraw, J. Allen, N. Mead, R. Ellison, and S. Barnum, "Software Security Engineering: A Guide for Project Managers (white paper)," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 13-May-2013 [Online]. Available: https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/. [Accessed: 16-Aug-2026].

McGraw, Gary, Julia Allen, Nancy Mead, Robert Ellison, and Sean Barnum. "Software Security Engineering: A Guide for Project Managers (white paper)." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 13 May. 2013. https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/. Accessed 16 Aug. 2026.

McGraw, Gary; Allen, Julia; Mead, Nancy; Ellison, Robert; & Barnum, Sean. Software Security Engineering: A Guide for Project Managers (white paper). Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/software-security-engineering-a-guide-for-project-managers-white-paper/