Comparative Evaluation of Cybersecurity Maturity Models and Frameworks
摘要
As cybersecurity threats evolve daily, there is a pressing need for ongoing enhancements in the cybersecurity strategies of the organizations in order to keep up with these threats. Cybersecurity maturity models and frameworks are crucial tools used by organizations to assess their security readiness. Developed by various international entities, consultants, and researchers, these tools provide a strategic approach to managing information security risks and addressing potential breaches that threaten data confidentiality, integrity, and availability. The NCSC's latest 2023 statistical review [1] reported a 64% increase in security incidents, totaling 2005 cases, indicating that current cybersecurity implementations are still lacking. This article aims to perform an in-depth comparative analysis of prevalent cybersecurity maturity models and frameworks to identify gaps, facilitate new academic research, and determine which aspects require further development or are already well-established.