Maturity Concept and Model Review

The management principle is widely known, according to which an activity cannot be managed if it cannot be measured and evaluated for compliance with the established requirements and assessment criteria. In turn, processes cannot be managed if they are not defined, and processes cannot be improved if they are not controlled. These ideas are fully applicable to the information security (IS) management (ISM) processes of any organization. The goal of the paper is to introduce the concept of a maturity model, based on a generalization of numerous sources, and to provide a short review of such models. In conclusion, the maturity models to be reviewed to develop a maturity model for network security centers with network security management processes to be assessed are identified.