Towards a Practical Information Security Maturity Evaluation Method focused on People, Process and Technology

摘要

Organizations are faced with an increased number of security-related challenges and need to safeguard their information and assets. The challenge is even greater for Industry 4.0, as it adopts advanced technologies for automation and data exchange. In this context, the information security controls assessment emerges as a fast, comprehensive way to deal with cybersecurity analysis, helping organizations measure the effectiveness and adequacy of their security controls. This paper presents an approach to help organizations, including Industry 4.0, improve their security maturity in a fast-paced way based on well-recognized frameworks.