Grip on Secure Software Development (Grip on SSD) is the result of a broad cooperation between government organizations, security experts, and software suppliers, with the aim to jointly assure sufficient secure software. It includes a method to co-operate, a set of clear and measurable security requirements, training materials and contract texts. These publications are freely available on the CIP website and are maintained by more than 30 public and private organizations in the group ' Practitioners Grip on SSD ', including Cap Gemini, IBM, SNS Reaal, UWV, tax office, Centric, Home affairs, CGI, Sogeti, Ordina, Valori, DKTP, DUO, Police, Logius, Software Improvement Group (SIG) and NCSC.

Grip on SSD is an initiative of the Dutch CIP (Center for Information security and Privacy protection). Since mid-2012 the CIP has been enabling many government organizations to share and develop knowledge in the field of information security and privacy protection. A number of system integrators and security service providers are connected as knowledge partner. With Grip on SSD, this co-operation has developed an approach to address the issues that organizations have with getting secure software.

The three pillars of SSD are: standard security requirements, contact moments and internal SSD-processes. The latter are processes for keeping track of risks, maintaining security requirements, and growing the organization to higher maturity levels. The SSD maturity model offers a growth path and helps to manage the expectations. For the definition of the requirements the SIVA specification method has been used, aimed to suit both decision makers and security specialists.