Presentation of Multicert's case study of software process improvement, via CMMI ML3 and ISO 27001 certification, with Strongstep consultancy services, focused on the tools usage (proprietary vs. free/open-source).

1. Multicert Case Study
Renato Portela
renato.portela@multicert.com

2. Agenda
• Organization
• Context
• Critical success factors
• Problems / Issues
• Solutions (improvements made)
• Conclusions / Lessons learned

3. Engineering for digital security

4. +
Context

5. Context

6. Critical Success Factors
• Learning and Continuous Improvement Process
• Start with Process and Organization, and only then
Tools
• Tools adapted to the Processes
• Control Costs
• Integrate Tools
• Generate Business Value Topics

7. Problem - FOSS or Proprietary?
Free/Open-Source Proprietary software
A report by the Standish Group
(2008) states that adoption of open-
source software models has resulted
in savings of about $60 billion per
year to consumers.
Costs(direct + indirect)
Security
No vendor lock-in
Quality
Generate extra value for
business
Easier
Faster
Better
More efficient

8. Solutions
1. Processes and Templates
VS.

9. Solutions
2. Configuration Management

10. Solutions
3. Integration

11. Conclusions
• Open Source:
 Operating System: Linux
 Documentation: LibreOffice + TWiki
 Document Management: Alfresco + Google Drive
 Configuration Management: SVN + Nexus
 Source Code Quality: SonarQube + Jenkins
 Project Management: Scraim
• Proprietary:
 JIRA + Crucible + Fisheye
 Microsoft Office