The Cybersecurity Capability Maturity Model for Sustainable Security Advantage
Charlette Donalds, Corlane Barclay, Kweku-Muata Osei-Bryson · 2022
The chapter presents the Cybersecurity Capability Maturity Model (CCMM), a six-step process of progressive development of cybersecurity maturity and knowledge integration that ranges from a state of limited awareness and application of security controls to pervasive optimization of the protection of critical assets. It represents an adaptation of earlier work on the same subject that proposes a shift from a threat-based perspective to a capability-based approach to addressing cybersecurity decision problems. The research introduces a five-factor model of the cyber environment that sets the platform for the CCMM which comprises five dimensions, namely environment, operations, legal and regulatory, technologies and capabilities. Balancing these components to minimize risk, threats and vulnerabilities while building capabilities can result in a sustainable security advantage, a capability-based approach to effectively managing or even controlling the dynamic cyber environment.