Information technology. Process assessment. Process capability assessment model for information security management
Information technology. Process assessment. Process capability assessment model for information security management
Мы хотим включить аналитику посещений, чтобы понимать, что искать людям на сайте. Без вашего согласия счётчики не загружаются. Политика конфиденциальности
1 Scope This Technical Specification:
— defines a process assessment model (PAM) that meets the requirements of ISO/IEC 33004 and that supports the performance of an assessment of process capability by providing indicators for guidance on the interpretation of the process purposes and outcomes as defined in ISO/IEC TS 33052 and the process attributes as defined in ISO/IEC 33020;
— provides guidance, by example, on the definition, selection and use of assessment indicators.
A PAM comprises a set of indicators of process performance and process capability. The indicators are used as a basis for collecting the objective evidence that enables an assessor to assign ratings. The set of indicators included in this Technical Specification is not intended to be an all-inclusive set nor is it intended to be applicable in its entirety. The PAM in this Technical Specification is directed at assessment sponsors and competent assessors who wish to select a model, and associated documented process method, for assessment (for either capability determination or process improvement). Additionally it may be of use to developers of assessment models in the construction of their own model, by providing examples of good information security management practices. It can be used by:
a) service pr...
Упомянутые в описании и другие стандарты PD