sei.cmu

Native AI Integration for Model-Based Systems Engineering: Three Layers that Make It Work

Dempsey, C., 2026: Native AI Integration for Model-Based Systems Engineering: Three Layers that Make It Work. Software Engineering Institute blog, Accessed October 3 ...
sei.cmu

The SEI CERT Coding Standard for Fortran

Svoboda, D., 2026: The SEI CERT Coding Standard for Fortran. Software Engineering Institute blog, Accessed September 30, 2026, https://doi.org/10.58012/w9t7-6y96 ...
sei.cmu

SEI and Accenture Release AI Adoption Maturity Model to Help Organizations Scale AI with Predictable Outcomes

PITTSBURGH, Pa., June 8, 2026—The Carnegie Mellon University Software Engineering Institute (SEI) and Accenture today released the Artificial Intelligence (AI) Adoption Maturity Model, an empirically ...
sei.cmu

The ELM Library: An LLM Evaluation Toolset

Turri, V., Schieber, N., Loughin, C., and Brooks, T., 2026: The ELM Library: An LLM Evaluation Toolset. Software Engineering Institute blog, Accessed October 1, 2026 ...
sei.cmu

Ensuring the Safety and Security of AI Systems

In this webcast, SEI researchers explain how System Theoretic Process Analysis helps organizations build stronger assurances about the safety and security of complex systems, including those that ...
sei.cmu

7 Recommendations to Improve SBOM Quality

Tobar, D., Jamieson, J., Priest, M., and Fricke, J., 2025: 7 Recommendations to Improve SBOM Quality. Software Engineering Institute blog, Accessed September 30, 2026 ...
sei.cmu

The DevSecOps Capability Maturity Model

Chick, T., Frye, B., and Reffett, A., 2025: The DevSecOps Capability Maturity Model. Software Engineering Institute blog, Accessed September 30, 2026, https://doi.org ...
sei.cmu

Application Programming Interface (API) Vulnerabilities and Risks

This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact. Application programming ...
sei.cmu

Independent Verification & Validation (IV&V) for Agile Developed Projects

This IEEE publication highlights an Agile approach to IV&V which can be particularly useful for projects using an Agile development methodology. Independent Verification and Validation (IV&V) is ...
sei.cmu

The 13 Key Elements of an Insider Threat Program

Costa, D., and Trzeciak, R., 2023: The 13 Key Elements of an Insider Threat Program. Software Engineering Institute blog, Accessed September 30, 2026, https://doi.org ...
sei.cmu

Secure by Design at CERT

Touhill, G., 2023: Secure by Design at CERT. Software Engineering Institute blog, Accessed September 30, 2026, https://doi.org/10.58012/edk0-h312. Within days of ...
sei.cmu

Insider Threat Program Evaluation

The Insider Threat Program Evaluation (ITPE) is an evidence-based, capability-level assessment. The ITPE is designed to benchmark an organization's insider threat program against a reference model ...