摘要： 在能力成熟度模型(CMM)的基础上提出"信息安全能力成熟度模型"(IS－CMM)这一构想，并着重探讨了IS－CMM各级中的核心流程域KPAs的构建。

关键词: 信息安全能力成熟度模型(IS-CMM), 总体信息安全流程(TISP), 核心流程域(KPAs), 基本实践(BPs)

Abstract: Information security capability maturity model (IS-CMM) is a model for the maturity capability assessment/evaluation in information security processes of one or more organizations. It is based upon the Software Engineering Institutes (SEI) CMM and proposed by Dr.Deng Bing,at Shanghai Jiaotong University.This paper mainly discusses the construction of key process area (KPAs) for each level of IS-CMM.

中图分类号: 

• TP311.5