Description
For this project, you are preparing to initiate a Secure Software Engineering Initiative in your organization. These are the first steps before implementation, so you want to ensure you are laying down a solid foundation. First, you will need to determine the following (company profile):
What is your company name?
What industry/space is your company in?
What is your company’s mission?
What is the organization structurehierarchy?
Who will be involved in the initiative?
What will their roles and duties be?
Format:
The first step of any initiative is to get buy-in (strategic value). Discuss the importance of this initiative. Use strong and persuasive language backed by scholarly sources to “sell” your initiative.
Discuss how your initiative will enhance customer security.
Talk about any external initiatives or frameworks you will incorporate into your project. How will they be implemented and used.
How will this impact the SDLC and what implementation of SDLC are you impacting or changing?
Discuss how you will manage risks and the direct value from the security initiative. What metrics and KPIs are being tracked to ensure/demonstrate success?”
Finally, bring it all together (summary)!
Except there is no word or page count; however, it is expected to be a “high value” document and contains sufficient information to facilitate a more refined and specific 15-20 minute presentation that would be given to executive leadership..
Grading Criteria
Title Page (10 pts)
Executive Summary (50pts)
Company Profile (20pts)
Strategic Value (35pts)
External Initiatives (30pts)
Software Development Life Cycle (Implementation) (25pts)
Risk Management (25pts)
Summary (35pts)
References (15pts)
Appendices as Needed
