| Info |
|---|
The objective of this page is to inventory other IAM CMMs, near complementary CMMs, or complementary CMMssimilar models, frameworks, and standards. |
CMM | Scope | Version | Comments | Key References |
|---|---|---|---|---|
CMMI-SVC | General-purpose CMM model for Service Providers | Version 1.3 (2011) | ||
COBIT 5 for Information Security | ||||
European Union Agency for Network and Information | ||||
ISO/IEC 27000 Family21827:2008(E) SSE-CMM (Systems Security Engineering - Capability Maturity Model) | InfoSec A | 2008 | Accompanied by the ISO 27k family of InfoSec standards comprising control capabilities (27002) and a CMM.information security standards. | |
ISF Standard of Good Practice for Information Security | ||||
IT Capability Maturity Framework - Information Security Management (IT-CMF:ISM) | ||||
ITIL | ||||
NIST Computer/Cybersecurity Frameworks | ||||
Osmanoglu | Workforce IAM | 2013 | A proper Workforce IAM CMM. | |
PalsonKennedy and Gopal | Cloud Computing and IAM | 2010 | Not a real CMM but rather a discussion on Cloud Computing, CMM. and IAM.PalsonKennedy and Gopal, 2010 | https://open-measure.atlassian.net/wiki/spaces/BIB/pages/1889108289 |
Payment Card Industry (PCI) Data Security Standard | ||||
SANS Top 20 | ||||
Security & Privacy Capability Maturity Model (SP-CMM) | Cybersecurity and Data Privacy | 2019.1 | ||
Secure Controls Framework | ||||
World Economic Forum Cyber Risk Framework (WEF-CRF) |
...