The University of SydneyPage 37The SSE-CMM–The two dimensions of the SSE-CMM Model are–Domain: All practices, that together, in a collective manner, define security engineering in an organisation(base practices)–Capability: practices that indicate process management and institutionalisationcapability (generic practices)