Security maturity assessment method.

Abstract

A methodology for evaluating an organization's information security policy and implementation that includes: identifying risks associated with information security policy and implementation; collecting information about information security policy and implementation; using the information collected using a security maturity assessment matrix, and risks associated with information security policies and implementations; use the scores to generate a list of corrective activities, perform corrective action lists to create new security information policies and implementations, and monitor new security information policies and implementations.

Description

Background technique [0001] Information security involves preventing unauthorized disclosure, transfer, modification or destruction of information, whether accidental or intentional. Information security has become a pervasive concern for organizations due to trends in electronic commerce, electronic commerce, universal e-mail and World Wide Web access, and fully open security development. As a result, organizations continually attempt to apply information security principles within corporate structures. [0002] A number of information standards and tools have been developed to enable agencies to apply information security principles in corporate structures. A widely accepted standard, BS7799 / ISO17799, was developed by the British Standards Institution (BSI) and adopted by the International Organization for Standardization (ISO). The BS7799 / ISO17799 standard is a comprehensive set of controls outlining best practices for information security. The purpose of BS7799 / ISO17799...

AI Technical Summary

Problems solved by technology

Assessments obtained from applying the SSE-CCM are generally not correlated with reporting tools reporting maturity levels

Images