The analysis and development of secure software assessment model (SSAM)

Abstract

Software evaluation can sometime become a problem in determining on how extensive to which a software products satisfies a set of requirements. Decision in choosing the right solution is a challenge to every organization. Conceptually, there is no right or wrong procedure in dealing with software purchases; however a consistent and transparent approach within the evaluation committee is important to ensure a high quality gathered from the end product. As for a big organization, choosing the right solution from the right vendors is crucial in order to ensure the business objective and goals are not interrupted. The problem with the situation is always on resources in term of people, process and skills with regards to the technology acquired. Insufficient number of people may contribute to the lack of quality output in finding out the best solution. Lack of skills in term of the requirement and technical “know-how” and “know-who” in choosing the right vendors may as well contribute to non-conformance product. The improper process of finding the solution is also can lead to the above problem. All mentioned problems can be aggregate with more shortcomings i.e. to incur more effort and cost to the organization in rectifying the problem. Introducing Secure Software Assessment Model (SSAM) can assist the organization to have a proper evaluation process with regards to security properties. Indirectly, implementing SSAM can also create more awareness on security requirements among users and solution providers. It would then reduce the problem facing by the organization in term of lacking compliances to the IT Security Policy.