Anzeige
Erschienen in:
2017 | Supplement | Buchkapitel
Comparative Study of Cybersecurity Capability Maturity Models
verfasst von : Angel Marcelo Rea-Guaman, Tomás San Feliu, Jose A. Calvo-Manzano, Isaac Daniel Sanchez-Garcia
Erschienen in: Software Process Improvement and Capability Determination
Abstract
According to ESET, cybersecurity can be defined as the protection of information assets, through the treatment of threats that put at risk the information that is processed, stored and transported by information systems that are interconnected; and a process that involves prevention, detection and reaction or response. This article aims to describe and compare the most used cybersecurity capability maturity models, as a result of a systematic review (SR) of published studies from 2012 to 2017. For this, a taxonomy for comparing cybersecurity capability maturity models was developed, based on Halvorsen and Conradi’s taxonomy. Also, the taxonomy is adapted and applied to the cybersecurity capability maturity models identified in the SR. It was observed that the cybersecurity capability maturity models have similar elements because they use processes and levels of maturity, they also manage the risk, although at different levels of depth. Finally, it has been observed that each model due to its particularity has different fields of application.