An analytics approach to adaptive maturity models using organizational characteristics

Baars, Thijs; Mijnhardt, Frederik; Vlaanderen, Kevin; Spruit, Marco

doi:10.1186/s40165-016-0022-1

Cited by 10 publications

(30 citation statements)

References 35 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The researchers found that 73 per cent of the assessed organizations were stuck in the initial level (1), mainly because the prescribed requirements in a certain process area were too hard to be met. In a study by Baars et al (2016), this problem was also addressed, although more geared towards the problems especially attributed to the ISFAM model. As the ISFAM model was co-developed in a medium-sized organization, the standards and best practices used for information security are also targeted at such organizations.…”

Section: The Need For Adaptive Information Security and Situational Amentioning

confidence: 99%

“…As described in our research framework, the method uses the previous knowledge base and incorporates the findings from the previous research (Spruit and Roeling, 2014;Mijnhardt et al, 2016;Baars et al, 2016).…”

Section: Artifact Descriptionmentioning

confidence: 99%

“…The OC heat map created during the previous step was used to create the adapted ISFAM model. The calculation was performed based on the survey data set from Baars et al (2016), which gave a general direction on which capabilities can be excluded. Based on the original survey data set created by Baars et al (2016) which contains relative valuations per focus area for each OC, we were able to calculate the maximum maturity level per focus area.…”

Section: A Case Study: Application Of Maismmc For Port Of Rotterdam Smentioning

confidence: 99%

“…Step 4: calculate maximum maturity levels for the focus areasthis step involves using the highest frequency values represented in the heat map as the OCs of SMEs in the cluster and entering these values into the model suggested by Baars et al (2016). This will result in the automatic calculation of the maximum maturity levels for each focus area.…”

mentioning

confidence: 99%

“…The application of this step and the calculations are elaborated and demonstrated in Section 5. In this step, we identify the effect the OCs of the SMEs have on the information security FAMM model by using the results of ANLYMM (Baars et al, 2016).…”

mentioning

confidence: 99%

See 4 more Smart Citations

Modelling adaptive information security for SMEs in a cluster

Özkan

Spruit

Wondolleck

et al. 2019

JIC

Self Cite

View full text Add to dashboard Cite

Purpose This paper presents a method for adapting an Information Security Focus Area Maturity (ISFAM) model to the organizational characteristics (OCs) of a small- and medium-sized enterprise (SME) cluster. The purpose of this paper is to provide SMEs with a tailored maturity model enabling them to capture and improve their information security capabilities. Design/methodology/approach Design Science Research was followed to design and evaluate the method as a design artifact. Findings The method has successfully been used to adapt the ISFAM model to a group of SMEs within a regional cluster resulting in a model that is aligned with the OCs of the cluster. Areas for further investigation and improvements were identified. Research limitations/implications The study is based on applying the proposed method for the SMEs active in the transport, logistics and packaging sector in the Port of Rotterdam. Future research can focus on different sectors and regions. The method can be used for adapting other focus area maturity models. Practical implications The resulting adapted maturity model can facilitate the creation and further development of a base of common or shared knowledge in the cluster. The adapted maturity model can cut the cost of over implementation of information security capabilities for the SMEs with scarce resources. Originality/value The resulting adapted maturity model can facilitate the creation and further development of a base of common or shared knowledge in the cluster. The adapted maturity model can cut the cost of over implementation of information security capabilities for the SMEs with scarce resources.

show abstract

Section: The Need For Adaptive Information Security and Situational Amentioning

confidence: 99%

Section: Artifact Descriptionmentioning

confidence: 99%

Section: A Case Study: Application Of Maismmc For Port Of Rotterdam Smentioning

confidence: 99%

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Modelling adaptive information security for SMEs in a cluster

Özkan

Spruit

Wondolleck

et al. 2019

JIC

Self Cite

View full text Add to dashboard Cite

show abstract

Addressing SME Characteristics for Designing Information Security Maturity Models

Özkan

Spruit

2020

IFIP Advances in Information and Communication Technology

Self Cite

View full text Add to dashboard Cite

This paper identifies the effects of small and medium-sized enterprises' (SME) characteristics on the general design principles for maturity models in the information security domain. The purpose is to guide the research on information security maturity modelling for SMEs that will fit in form and function for their capability assessment and development purposes, and promote organizational learning and development. This study reviews the established frameworks of general design principles for maturity models and projects the design requirements of our envisioned information security maturity model for SMEs. Maturity models have different purposes of uses (descriptive, prescriptive and comparative) and design principles with respect to these purposes of uses. The mapping of SME characteristics and design principles facilitates the development of an information security maturity model that systematically integrates the desired qualities and components addressing SME characteristics and requirements.

show abstract

Focus Area Maturity Models: A Comparative Review

Sanchez-Puchol

Pastor-Collado

2017

Information Systems

View full text Add to dashboard Cite

An analytics approach to adaptive maturity models using organizational characteristics

Cited by 10 publications

References 35 publications

Modelling adaptive information security for SMEs in a cluster

Modelling adaptive information security for SMEs in a cluster

Addressing SME Characteristics for Designing Information Security Maturity Models

Focus Area Maturity Models: A Comparative Review

Contact Info

Product

Resources

About