Digital Library
The SEI Digital Library provides access to more than 5,000 documents from three decades of research into best practices in software engineering. These documents include technical reports, presentations, webinars, podcasts and other materials searchable by user-supplied keywords and organized by topic, publication type, publication year, and author.
Latest Publications
-
Guide to Implementing DevSecOps for a System of Systems in Highly Regulated Environments
April 8, 2020 • Technical Report
By Jose A. Morales, Richard Turner, Suzanne Miller, Peter Capell, Patrick R. Place, David James Shepard
This Technical Report provides guidance to projects interested in implementing DevSecOps (DSO) in defense or other highly regulated environments, including those involving systems of systems.
read -
Connecting Cyber Risk Managers to Executives: Understanding Risk Governance and Appetite
April 3, 2020 • Webinar
By Matthew Trevors, Brett Tucker
This webcast discussed how professionals and executives communicate risk concerns despite the cacophony and distraction posed by technical details and other organizational demands using the new OCTAVE FORTE approach.
watch -
At What Point Does DevSecOps Become Too Risky for the Business?
April 2, 2020 • Webinar
By Hasan Yasar
This webcast covered the implementation of an automated, continuous risk pipeline that demonstrates how cyber-resiliency and compliance risk can be traced to and from DevSecOps teams working in the SDLC program and project levels.
watch -
The CERT Guide to Coordinated Vulnerability Disclosure
March 26, 2020 • Podcast
By Allen D. Householder, David Warren
Allen Householder and David Warren discuss the CERT Guide to Coordinated Vulnerability Disclosure, which is used by security researchers, software vendors, and other stakeholders in informing others about security vulnerabilities.
learn more -
Designing Trustworthy AI: A User Experience (UX) Framework
March 24, 2020 • Webinar
By Carol J Smith
This webcast introduced a new user experience (UX) framework to guide the creation of AI systems that are accountable, de-risked, respectful, secure, honest and usable.
watch