Good afternoon
People = There is the People CMM from Carnegie Mellon
Customer Management = There is ITIL or Microsoft Operation/Solution
Framework
IT Process and IT Management = CoBIT, ITIL and CMMI
Software Development = XP, CMMI, RUP, Common Criteria, NIST, IEEE/ISO
Admin and Facilities = NIST, BS7799, RCMP, US Militaries
By the way, CoBIT is not that generic, it is a wide perception but if
you look at CoBIT in deep, it includes Performance Goal, KPI and Control
Objectives.
Martin Dion, CISM
Chief Technology Officer
FIRST Representative - AboveSecCERT
Above Security
Phone: (450) 430-8166 #103
Fax: (514) 370-8335
Cell: (514) 831-5427
Email: martin.dion@abovesecurity.com
This message and any attachments are confidential and intended solely
for the addressee. If you have received this message in error please
delete it and notify Above Security immediately, telephone number (450)
430-8166. Any unauthorized use, alteration or dissemination is
prohibited. Above Security accepts no liability whatsoever for any loss,
whether it be direct, indirect or consequential, arising from
information made available and actions resulting there from.
-----Original Message-----
From: sanjiv [mailto:ska262001@yahoo.co.in]
Sent: January 13, 2005 4:31 AM
To: security-management@securityfocus.com
Subject: Question on Standards
What are the specific industry standards relevant to
1) People
2) Customer management
3) IT processes and IT management
4) Software development
5) Admin and facilities
We are not looking for a generic standard like COBIT
but standards which address each of these areas in
detail...
Best Regards,
Sanjiv Agarwala
__________________________________
Do you Yahoo!?
All your favorites on one personal page - Try My Yahoo!
http://my.yahoo.com
