Can I read GoCoMM: a governance and compliance maturity model on EtoBox?
GoCoMM: a governance and compliance maturity model by Gabriela Gheorghe; Fabio Massacci; Stephan Neuhaus; Alexander Pretschner is a scholarly article available to read on EtoBox.
What is GoCoMM: a governance and compliance maturity model about?
Advanced methodologies for compliance such as CobiT identify a number of maturity levels that must be reached: first the existence of an infrastructure for the enforcement of security controls; second, the ability to continuously monitor and audit quantifiable indicators for the controls put in place; and third, the ability to react when a policy violation is detected. In this paper, we go further and define a governance and compliance maturity model (GoCoMM) that is process-oriented. As an instance of the highest level of governance and compliance, we suggest a method of goal correlation that provides measurable indicators of security and compliance by systematically refining business processes and regulatory goals. We also introduce a run-time architecture to support this model.
- Author
- Gabriela Gheorghe; Fabio Massacci; Stephan Neuhaus; Alexander Pretschner
- Publisher
- ACM
- Published
- 2009
- Language
- EN