GB/T 20261-2006 in English

《GB/T 20261-2006信息技术 系统安全工程 能力成熟度模型》由TC28（全国信息技术标准化技术委员会）归口，主管部门为国家标准化管理委员会。
本标准是系统安全工程的一个过程参考模型，关注的是信息技术安全领域内某个或若干个相关系统实现安全的需求，主要描述了用来实现信息技术安全的过程，尤其是过程的成熟度。

Scope

The System Security Engineering Capability Maturity Model (hereinafter referred to as SSE-CMM) is a process reference model. It focuses on the security requirements of a system or several related systems in the field of information technology security (ITS). Within the field of ITS, the SSE-CMM focuses on the processes used to achieve ITS, especially the maturity of these processes. The purpose of the SSE-CMM is not to prescribe specific processes, let alone specific methods, used by organizations. Rather, it is expected that organizations preparing to use the SSE-CMM will leverage their existing processes -- those that are based on any other IT security guidance document. The scope of this standard includes: System security engineering activities involving the entire life cycle of secure products or trusted systems: concept definition, requirements analysis, design, development, integration, installation, operation, maintenance and final decommissioning; System developers and integrators, and the requirements of organizations providing computer security services and computer security engineering; applicable to security engineering organizations of all types and sizes, from business to government and academia.