Open Information Security Management Maturity Model: Difference between revisions

Revision as of 13:25, 6 February 2023

Latest revision as of 05:01, 11 March 2024

(One intermediate revision by one other user not shown)

Line 1:

{{Short description|Framework for managing information security}}

The '''[[The Open Group|Open Group]] Information Security Management Maturity Model''' ('''O-ISM3''') is a [[maturity model]] for managing [[information security]]. It aims to ensure that security processes in any organization are implemented so as to operate at a level consistent with that organization’s business requirements. O-ISM3 defines a comprehensive but manageable number of information security processes sufficient for the needs of most organizations, with the relevant security control(s) being identified within each process as an essential subset of that process. <ref>O-ISM3 v2.0 2018 p6</ref>

== History ==