Page Comparison

Info
The objective of this page is to inventory other IAM CMMs, near complementary CMMs, or complementary CMMssimilar models, frameworks, and standards.

CMM	Scope

Last Update /

Version	Comments	Key References
CMMI-SVC	General-purpose CMM model for Service Providers	Version 1.3 (2011)		Forrester et al., 2011 CMMI Product Team, 2010
COBIT 5 for Information Security
European Union Agency for Network and Information Security (ENISA)
ISO/IEC 21827:2008(E) SSE-CMM (Systems Security Engineering - Capability Maturity Model)	InfoSec	2008	Accompanied by the ISO 27k family of information security standards.	ISO and IEC, 2008
ISF Standard of Good Practice for Information Security
IT Capability Maturity Framework - Information Security Management (IT-CMF:ISM)
ITIL
NIST Computer/Cybersecurity Frameworks
Osmanoglu

CMM

PalsonKennedy and Gopal
	Workforce IAM	2013	A proper Workforce IAM CMM.	Osmanoglu, 2013

CMM

	Cloud Computing and IAM	2010

Not a real CMM but rather a discussion on Cloud Computing, CMM. and IAM.	https://open-measure.atlassian.net/wiki/spaces/BIB/pages/1889108289
Payment Card Industry (PCI) Data Security Standard (PCI-DSS)
SANS Top 20
Security & Privacy Capability Maturity Model (SP-CMM)	Cybersecurity and Data Privacy	2019.1
Secure Controls Framework			https://www.securecontrolsframework.com/
World Economic Forum Cyber Risk Framework (WEF-CRF)

Versions Compared