Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

›› 2003, Vol. 29 ›› Issue (10): 126-.

• Papers • Previous Articles     Next Articles

Construction of Information Security Capability Maturity Model (IS-CMM)

DENG Bing   

  1. (Management School & Software Engineering School, Shanghai Jiaotong University, Shanghai 200052)
  • Published:2003-05-25

信息安全能力成熟度模型(IS-CMM)的建构

邓冰   

  1. 上海交通大学管理学院及软件学院 上海 200052

Abstract: Information security capability maturity model (IS-CMM) is a model for the maturity capability assessment/evaluation in information security processes of one or more organizations. It is based upon the Software Engineering Institutes (SEI) CMM and proposed by Dr.Deng Bing,at Shanghai Jiaotong University.This paper mainly discusses the construction of key process area (KPAs) for each level of IS-CMM.

摘要: 在能力成熟度模型(CMM)的基础上提出"信息安全能力成熟度模型"(IS-CMM)这一构想,并着重探讨了IS-CMM各级中的核心流程域KPAs的构建。

关键词: 信息安全能力成熟度模型(IS-CMM), 总体信息安全流程(TISP), 核心流程域(KPAs), 基本实践(BPs)

CLC Number: