Information Security Management Metrics

Current State of Security Metrics ◾ 41

itself. e second dimension represents the contrast between stability and control

and flexibility and change.

e competing values framework received its name because the criteria within

the four models seem at first to carry conflicting messages. Organizations should be

on the one hand adaptable and flexible and on the other stable and controlled.

e University of Twente in the Netherlands published the following article

describing the framework. Appendix D has the complete assessment process, called

the Organization Culture Assessment Instrument (OCAI).

Core Assumptions and Statements

e framework has four qua ...