December 2020
Intermediate to advanced
361 pages
6h 26m
English
The CRF has a further layer beyond the roster of control activities: maturity. As you are probably aware, maturity describes how well developed and integrated an activity (or framework) is. In the context of security, this is a valuable way of understanding both how well you are protecting your organisation and how much further you may need to go in order to meet your organisation’s requirements for cyber security and resilience.
The CRF maturity levels, which can be used to measure individual processes as well as the overall framework, are:
1.Non-existent:
The framework/process does not exist, or is not consistent or reliable.
2.In progress:
The organisation is implementing the framework/process or has deployed it ...