sei.cmu

The SEI CERT Coding Standard for Fortran

Svoboda, D., 2026: The SEI CERT Coding Standard for Fortran. Software Engineering Institute blog, Accessed July 17, 2026, https://doi.org/10.58012/w9t7-6y96. This ...
sei.cmu

SEI and Accenture Release AI Adoption Maturity Model to Help Organizations Scale AI with Predictable Outcomes

PITTSBURGH, Pa., June 8, 2026—The Carnegie Mellon University Software Engineering Institute (SEI) and Accenture today released the Artificial Intelligence (AI) Adoption Maturity Model, an empirically ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed July 16, 2026 ...
sei.cmu

The DevSecOps Capability Maturity Model

Chick, T., Frye, B., and Reffett, A., 2025: The DevSecOps Capability Maturity Model. Software Engineering Institute blog, Accessed July 16, 2026, https://doi.org/10. ...
sei.cmu

Using LLMs to Adjudicate Static-Analysis Alerts

Software analysts use static analysis as a standard method to evaluate the source code for potential vulnerabilities, but the volume of findings is often too large to review in their entirety, causing ...
sei.cmu

Using Large Language Models in the National Security Realm

At the request of the White House, the Office of the Director of National Intelligence (ODNI) began exploring use cases for large language models (LLMs) within the Intelligence Community (IC). As part ...
sei.cmu

The Top 10 Skills CISOs Need in 2024

Touhill, G., 2024: The Top 10 Skills CISOs Need in 2024. Software Engineering Institute blog, Accessed July 16, 2026, https://doi.org/10.58012/tphr-nz17. The role of ...
sei.cmu

The 13 Key Elements of an Insider Threat Program

Costa, D., and Trzeciak, R., 2023: The 13 Key Elements of an Insider Threat Program. Software Engineering Institute blog, Accessed July 10, 2026, https://doi.org/10. ...
sei.cmu

Secure Software by Design 2023

SEI Secure Software by Design is intended to improve the state of this holistic secure development approach by bringing together thought leaders in this area for presentations and discussions on all ...
sei.cmu

Designing Vultron: A Protocol for Multi-Party Coordinated Vulnerability Disclosure (MPCVD)

The Coordinated Vulnerability Disclosure (CVD) process addresses a human coordination problem that spans individuals and organizations. In this report, we propose a formal protocol specification for ...
sei.cmu

10 Years of Research in Technical Debt and an Agenda for the Future

Technical debt is a widely recognized software engineering concern that refers to the tradeoff between the short-term benefits of rapid delivery and the long-term value of developing a software system ...
sei.cmu

Tactics and Patterns for Software Robustness

Kazman, R., 2022: Tactics and Patterns for Software Robustness. Software Engineering Institute blog, Accessed July 16, 2026, https://www.sei.cmu.edu/blog/tactics-and ...