The General IAM-CMM
Description
The objective of the General IAM-CMM is to provide a high-level capability maturity model to assess global IAM programs within organizations. In general, practices that are specific to one IAM domain (e.g.: Workforce IAM, PAM/TAM, CIAM, etc.) are should be excluded from this CMM and included in domain-specific CMMs.
Editors' Guide
- Provide guidance for contributors
CMM
Process Area | Practice | Level 1 Initial | Level 2 Repeatable | Level 3 Defined | Level 4 Managed | Level 5 Optimizing |
---|---|---|---|---|---|---|
BP-0026: The IAM Program is benchmarked against similar organizations | The IAM Program is systematically and regularly benchmarked, both qualitatively and quantitatively, against peer organizations on varying dimensions (e.g. security, costs, performance, etc.). Strengths and weaknesses are identified and inform continuous improvement of the IAM program. | |||||