The University of SydneyPage 47SSE-CMM Architecture Description–Capability Level 1 –Initial–Have ad-hoc processes for managing security–Security considerations are not incorporated in the systems design and development practices–Lack a contingency plan to avert any crisis