The University of SydneyPage 41Key Constructs and Concepts in SSE-CMM–Customer: the entity (individual, group of individuals, organisation) for whom a product is developed or service is made, or the entity that uses the product or service–Process:–A defined process is formally described for or by an organisationfor use by its security engineers–A performed process is what these people (security engineers) actually end up doing–Process Area (PA): a group of related security engineering process characteristics, which when performed in a collective manner, can achieve a defined purpose