|
INFOSEC Assurance Capability Maturity Model |
|
|
|
Source: IATRP - Posted by Benjamin D. Thomas
|
The INFOSEC Assurance - Capability Maturity Model (IA-CMM) is based on the System Security Engineering Capability Maturity Model (SSE-CMM) and modified to address the INFOSEC assurance processes.
Whereas IATRP methodology training focuses on an individual's ability to conduct an INFOSEC assurance service, the IA-CMM appraisal focuses on a provider organization's capability to support INFOSEC analyst in conducting their mission objectives (i.e. to provide quality INFOSEC Assurance or Evaluation).
The IA-CMM is used to measure two things; the maturity of processes (specific functions) that produce products (e.g., identified vulnerabilities, countermeasures, and threats) and the level of compliance a process has with respect to an IATRP methodology.
Read this full article at IATRP
Powered by AkoComment! |
