Cleaned up Literature folder

This commit is contained in:
Richard Kranendonk 2026-05-18 12:48:01 +02:00
parent 73a6380034
commit fe5eda4e05
586 changed files with 53911 additions and 2475 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 87 KiB

View file

@ -1,48 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!-- Generated by Pixelmator Pro 3.3.8 -->
<svg width="308" height="325" viewBox="0 0 308 325" xmlns="http://www.w3.org/2000/svg">
<g id="layer1">
<g id="g3727">
<linearGradient id="linearGradient1" x1="176.583055" y1="139.141859" x2="176.583055" y2="-0.865585" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa801" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter1" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3729" fill="url(#linearGradient1)" fill-rule="evenodd" stroke="none" filter="url(#filter1)" d="M 41.743351 51.212738 C 42.150017 50.212677 81.490059 -0.787109 154.15152 -0.788086 C 241.369644 -0.789307 282.151245 71.210953 282.153748 73.212296 L 308.786102 58.010773 L 276.255157 139.199417 L 191.631668 122.876572 L 222.734482 105.581619 C 221.999237 104.369354 201.152359 67.227112 154.151062 66.710693 C 123.328072 66.372772 101.774658 86.241028 101.125603 86.815338 L 86.577553 44.750305 L 41.742172 51.212402 Z"/>
</g>
<g id="g3739">
<linearGradient id="linearGradient2" x1="201.674687" y1="324.901983" x2="201.674687" y2="97.00703" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa900" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter2" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3741" fill="url(#linearGradient2)" fill-rule="evenodd" stroke="none" filter="url(#filter2)" d="M 293.057343 97.134033 C 293.720062 97.986221 318.216492 157.554413 281.887238 220.480164 C 238.279953 296.012177 155.536804 295.329773 153.802383 294.331268 L 153.651047 324.995667 L 99.606407 256.230042 L 156.053131 191.106888 L 155.479507 226.689453 C 156.896957 226.658844 199.485641 227.176117 223.433105 186.730927 C 239.136978 160.206985 232.707489 131.607651 232.534653 130.758408 L 276.237122 139.191864 L 293.058228 97.133179 Z"/>
</g>
<g id="g3747">
<linearGradient id="linearGradient3" x1="65.034598" y1="291.714732" x2="65.034598" y2="44.594594" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa801" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter3" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3749" fill="url(#linearGradient3)" fill-rule="evenodd" stroke="none" filter="url(#filter3)" d="M 127.642105 291.814484 C 126.572731 291.96228 62.736691 283.39212 26.406387 220.466537 C -17.202187 144.934738 24.761213 73.618286 26.493158 72.615494 L 0.012685 57.151917 L 86.588356 44.731384 L 114.762726 126.177933 L 84.234138 107.889526 C 83.551903 109.13237 61.809147 145.756607 84.86174 186.718735 C 99.980049 213.580933 127.962624 222.31279 128.784515 222.587738 L 99.629242 256.218384 L 127.642403 291.815674 Z"/>
</g>
</g>
</svg>

Before

Width:  |  Height:  |  Size: 4.3 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 70 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 54 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.1 MiB

View file

@ -1,395 +0,0 @@
<!DOCTYPE html>
<html class="client-nojs" lang="en" dir="ltr">
<head>
<meta charset="UTF-8"/>
<title>File:Characteristics of Capability Maturity Model.svg - Wikipedia</title>
<script>document.documentElement.className="client-js";RLCONF={"wgBreakFrames":false,"wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat":"dmy","wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgRequestId":"15973eb8-07fd-460b-9001-7edd0829d412","wgCSPNonce":false,"wgCanonicalNamespace":"File","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":6,"wgPageName":"File:Characteristics_of_Capability_Maturity_Model.svg","wgTitle":"Characteristics of Capability Maturity Model.svg","wgCurRevisionId":0,"wgRevisionId":0,"wgArticleId":0,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":[],"wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgRelevantPageName":"File:Characteristics_of_Capability_Maturity_Model.svg","wgRelevantArticleId":0,"wgIsProbablyEditable":false,"wgRelevantPageIsProbablyEditable":false,
"wgRestrictionCreate":[],"wgRestrictionUpload":[],"wgFlaggedRevsParams":{"tags":{"status":{"levels":-1}}},"wgMediaViewerOnClick":true,"wgMediaViewerEnabledByDefault":true,"wgPopupsFlags":10,"wgVisualEditor":{"pageLanguageCode":"en","pageLanguageDir":"ltr","pageVariantFallbacks":"en"},"wgMFDisplayWikibaseDescriptions":{"search":true,"nearby":true,"watchlist":true,"tagline":false},"wgWMESchemaEditAttemptStepOversample":false,"wgWMEPageLength":0,"wgNoticeProject":"wikipedia","wgULSCurrentAutonym":"English","wgEditSubmitButtonLabelPublish":true,"wgCentralAuthMobileDomain":false,"wgULSPosition":"interlanguage","wgULSisCompactLinksEnabled":true,"wgGENewcomerTasksGuidanceEnabled":true,"wgGEAskQuestionEnabled":false,"wgGELinkRecommendationsFrontendEnabled":false};RLSTATE={"ext.globalCssJs.user.styles":"ready","site.styles":"ready","user.styles":"ready","ext.globalCssJs.user":"ready","user":"ready","user.options":"loading","filepage":"ready","mediawiki.action.view.filepage":"ready",
"skins.vector.styles.legacy":"ready","ext.visualEditor.desktopArticleTarget.noscript":"ready","ext.wikimediaBadges":"ready","ext.uls.interlanguage":"ready"};RLPAGEMODULES=["mediawiki.action.view.metadata","site","mediawiki.page.ready","skins.vector.legacy.js","ext.gadget.ReferenceTooltips","ext.gadget.charinsert","ext.gadget.extra-toolbar-buttons","ext.gadget.refToolbar","ext.gadget.switcher","mmv.head","mmv.bootstrap.autostart","ext.popups","ext.visualEditor.desktopArticleTarget.init","ext.visualEditor.targetLoader","ext.eventLogging","ext.wikimediaEvents","ext.navigationTiming","ext.cx.eventlogging.campaigns","ext.centralNotice.geoIP","ext.centralNotice.startUp","ext.centralauth.centralautologin","ext.uls.compactlinks","ext.uls.interface"];</script>
<script>(RLQ=window.RLQ||[]).push(function(){mw.loader.implement("user.options@1hzgi",function($,jQuery,require,module){/*@nomin*/mw.user.tokens.set({"patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"});
});});</script>
<link rel="stylesheet" href="/w/load.php?lang=en&amp;modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cfilepage%7Cmediawiki.action.view.filepage%7Cskins.vector.styles.legacy&amp;only=styles&amp;skin=vector"/>
<script async="" src="/w/load.php?lang=en&amp;modules=startup&amp;only=scripts&amp;raw=1&amp;skin=vector"></script>
<link rel="stylesheet" href="https://commons.wikimedia.org/w/index.php?title=MediaWiki:Filepage.css&amp;action=raw&amp;ctype=text/css"/>
<meta name="ResourceLoaderDynamicStyles" content=""/>
<link rel="stylesheet" href="/w/load.php?lang=en&amp;modules=site.styles&amp;only=styles&amp;skin=vector"/>
<meta name="generator" content="MediaWiki 1.38.0-wmf.9"/>
<meta name="referrer" content="origin"/>
<meta name="referrer" content="origin-when-crossorigin"/>
<meta name="referrer" content="origin-when-cross-origin"/>
<meta name="format-detection" content="telephone=no"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1200px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="1200"/>
<meta property="og:image:height" content="900"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="800"/>
<meta property="og:image:height" content="600"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/640px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="640"/>
<meta property="og:image:height" content="480"/>
<meta property="og:title" content="File:Characteristics of Capability Maturity Model.svg - Wikipedia"/>
<meta property="og:type" content="website"/>
<link rel="preconnect" href="//upload.wikimedia.org"/>
<link rel="preconnect" href="//upload.wikimedia.org"/>
<link rel="alternate" media="only screen and (max-width: 720px)" href="//en.m.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"/>
<link rel="apple-touch-icon" href="/static/apple-touch/wikipedia.png"/>
<link rel="shortcut icon" href="/static/favicon/wikipedia.ico"/>
<link rel="search" type="application/opensearchdescription+xml" href="/w/opensearch_desc.php" title="Wikipedia (en)"/>
<link rel="EditURI" type="application/rsd+xml" href="//en.wikipedia.org/w/api.php?action=rsd"/>
<link rel="license" href="https://creativecommons.org/licenses/by-sa/3.0/"/>
<link rel="canonical" href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"/>
<link rel="dns-prefetch" href="//meta.wikimedia.org" />
<link rel="dns-prefetch" href="//login.wikimedia.org"/>
</head>
<body class="mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-6 ns-subject page-File_Characteristics_of_Capability_Maturity_Model_svg rootpage-File_Characteristics_of_Capability_Maturity_Model_svg skin-vector action-view skin-vector-legacy"><div id="mw-page-base" class="noprint"></div>
<div id="mw-head-base" class="noprint"></div>
<div id="content" class="mw-body" role="main">
<a id="top"></a>
<div id="siteNotice"><!-- CentralNotice --></div>
<div class="mw-indicators">
<div id="mw-indicator-commons-icon" class="mw-indicator"><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" title="This is a file from the Wikimedia Commons"><img alt="This is a file from the Wikimedia Commons" src="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/15px-Commons-logo.svg.png" decoding="async" width="15" height="20" srcset="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/22px-Commons-logo.svg.png 1.5x, //upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png 2x" data-file-width="1024" data-file-height="1376" /></a></div>
</div>
<h1 id="firstHeading" class="firstHeading" >File:Characteristics of Capability Maturity Model.svg</h1>
<div id="bodyContent" class="vector-body">
<div id="siteSub" class="noprint">From Wikipedia, the free encyclopedia</div>
<div id="contentSub"></div>
<div id="contentSub2"></div>
<div id="jump-to-nav"></div>
<a class="mw-jump-link" href="#mw-head">Jump to navigation</a>
<a class="mw-jump-link" href="#searchInput">Jump to search</a>
<div id="mw-content-text" class="mw-body-content"><ul id="filetoc"><li><a href="#file">File</a></li>
<li><a href="#filehistory">File history</a></li>
<li><a href="#filelinks">File usage</a></li>
<li><a href="#globalusage">Global file usage</a></li>
<li><a href="#metadata">Metadata</a></li></ul><div class="fullImageLink" id="file"><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg"><img alt="File:Characteristics of Capability Maturity Model.svg" src="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="800" height="600" srcset="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1200px-Characteristics_of_Capability_Maturity_Model.svg.png 1.5x, //upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1600px-Characteristics_of_Capability_Maturity_Model.svg.png 2x" data-file-width="800" data-file-height="600" /></a><div class="mw-filepage-resolutioninfo">Size of this PNG preview of this SVG file: <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">800 × 600 pixels</a>. <span class="mw-filepage-other-resolutions">Other resolutions: <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/320px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">320 × 240 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/640px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">640 × 480 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1024px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">1,024 × 768 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1280px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">1,280 × 960 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/2560px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">2,560 × 1,920 pixels</a>.</span></div></div>
<div class="fullMedia"><p><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg" class="internal" title="Characteristics of Capability Maturity Model.svg">Original file</a> &#8206;<span class="fileInfo">(SVG file, nominally 800 × 600 pixels, file size: 15 KB)</span>
</p></div><div class="sharedUploadNotice">
<table id="mw-sharedupload" class="plainlinks fmbox fmbox-system" role="presentation"><tbody><tr><td class="mbox-image"><img alt="" src="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png" decoding="async" title="Wikimedia Commons logo" width="30" height="40" class="noviewer" srcset="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/45px-Commons-logo.svg.png 1.5x, //upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/59px-Commons-logo.svg.png 2x" data-file-width="1024" data-file-height="1376" /></td><td class="mbox-text" style="text-align: center;">This is a file from the <a href="https://commons.wikimedia.org/wiki/Main_Page" class="extiw" title="commons:Main Page">Wikimedia Commons</a>. Information from its <b><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" class="extiw" title="commons:File:Characteristics of Capability Maturity Model.svg">description page there</a></b> is shown below.<br /><span style="font-size: smaller;">Commons is a freely licensed media file repository. <a href="https://commons.wikimedia.org/wiki/Commons:Welcome" class="extiw" title="commons:Commons:Welcome">You can help</a>.</span></td></tr></tbody></table>
</div>
<div id="shared-image-desc"><div class="mw-parser-output"><div class="hproduct commons-file-information-table">
<table class="fileinfotpl-type-information toccolours vevent mw-content-ltr" style="width: 100%; direction: ltr;" cellpadding="4"><tbody><tr style="vertical-align: top"><td id="fileinfotpl_desc" class="fileinfo-paramfield" lang="en">Description<span class="summary fn" style="display:none">Characteristics of Capability Maturity Model.svg</span></td>
<td class="description">
<div class="description mw-content-ltr en" dir="ltr" lang="en"><span class="language en" title="English"><b>English: </b></span> The five process maturity levels in the Capability Maturity Model.</div></td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_date" class="fileinfo-paramfield" lang="en">Date</td>
<td lang="en">
Retrieved 8 dec 2008</td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_src" class="fileinfo-paramfield" lang="en">Source</td>
<td>
<a rel="nofollow" class="external text" href="http://software.gsfc.nasa.gov/docs/What%20is%20CMMI.ppt">What is CMMI ?</a></td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_aut" class="fileinfo-paramfield" lang="en">Author</td>
<td>
Sally Godfrey</td>
</tr></tbody></table></div>
<h2><span class="mw-headline" id="Licensing">Licensing</span></h2>
<table class="licensetpl" style="display:none"><tbody><tr><td><span class="licensetpl_short">Public domain</span><span class="licensetpl_long">Public domain</span><span class="licensetpl_link_req">false</span><span class="licensetpl_attr_req">false</span>
</td></tr></tbody></table><table style="width:100%; clear:both; margin:0.5em auto; background-color:#f7f8ff; border:2px solid #8888aa; direction: ltr; border-spacing: 8px; padding: 0px;" class="layouttemplate mw-content-ltr" lang="en"><tbody><tr><td><img alt="Public domain" src="https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/64px-PD-icon.svg.png" decoding="async" title="Public domain" width="64" height="64" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/96px-PD-icon.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/128px-PD-icon.svg.png 2x" data-file-width="196" data-file-height="196"></td>
<td><i>This file is in the <b><a href="https://en.wikipedia.org/wiki/public_domain" class="extiw" title="w:public domain">public domain</a></b> in the United States because it was solely created by <a href="https://en.wikipedia.org/wiki/NASA" class="extiw" title="w:NASA">NASA</a>. NASA copyright policy states that "NASA material is not protected by copyright <b>unless noted</b>". (See <a href="//commons.wikimedia.org/wiki/Template:PD-USGov" title="Template:PD-USGov">Template:PD-USGov</a>, <a rel="nofollow" class="external text" href="https://www.nasa.gov/multimedia/guidelines/index.html">NASA copyright policy page</a> or <a rel="nofollow" class="external text" href="https://www.jpl.nasa.gov/imagepolicy/">JPL Image Use Policy</a>.)</i>
</td>
<td><div class="floatright"><img alt="NASA logo.svg" src="https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/64px-NASA_logo.svg.png" decoding="async" width="64" height="54" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/96px-NASA_logo.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/128px-NASA_logo.svg.png 2x" data-file-width="110" data-file-height="92"></div>
</td></tr><tr><td><div class="floatleft"><img alt="Dialog-warning.svg" src="https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/50px-Dialog-warning.svg.png" decoding="async" width="50" height="50" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/75px-Dialog-warning.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/100px-Dialog-warning.svg.png 2x" data-file-width="48" data-file-height="48"></div>
</td>
<td><small><b>Warnings:</b><br>* Use of <a href="https://en.wikipedia.org/wiki/NASA_logo" class="extiw" title="w:NASA logo">NASA logos</a>, insignia and emblems is restricted per U.S. law <a rel="nofollow" class="external text" href="https://www.govinfo.gov/app/details/CFR-2021-title14-vol5/CFR-2021-title14-vol5-part1221/summary">14 CFR 1221</a>.
</small><ul><small><li>The NASA website hosts a large number of images from the <a href="https://en.wikipedia.org/wiki/Soviet_space_program" class="extiw" title="w:Soviet space program">Soviet</a>/<a href="https://en.wikipedia.org/wiki/Russian_Federal_Space_Agency" class="extiw" title="w:Russian Federal Space Agency">Russian space agency</a>, and other non-American space agencies. These are <i>not necessarily</i> in the public domain.</li>
<li>Materials based on <a href="https://en.wikipedia.org/wiki/Hubble_Space_Telescope" class="extiw" title="w:Hubble Space Telescope">Hubble Space Telescope</a> data may be copyrighted if they are not explicitly produced by the <a href="https://en.wikipedia.org/wiki/Space_Telescope_Science_Institute" class="extiw" title="w:Space Telescope Science Institute">STScI</a>.<a rel="nofollow" class="external autonumber" href="http://hubblesite.org/copyright/">[1]</a> See also <a href="//commons.wikimedia.org/wiki/Template:PD-Hubble" title="Template:PD-Hubble"><span style="font-family:monospace,monospace;">{{PD-Hubble}}</span></a> and <a href="//commons.wikimedia.org/wiki/Template:Cc-Hubble" class="mw-redirect" title="Template:Cc-Hubble"><span style="font-family:monospace,monospace;">{{Cc-Hubble}}</span></a>.</li>
<li>The <a href="https://en.wikipedia.org/wiki/Solar_and_Heliospheric_Observatory" class="extiw" title="w:Solar and Heliospheric Observatory">SOHO (ESA &amp; NASA)</a> joint project implies that all materials created by its probe are copyrighted and require permission for commercial non-educational use. <a rel="nofollow" class="external autonumber" href="https://sohowww.nascom.nasa.gov/data/summary/copyright.html">[2]</a></li>
<li>Images featured on the <i><a href="https://en.wikipedia.org/wiki/Astronomy_Picture_of_the_Day" class="extiw" title="w:Astronomy Picture of the Day">Astronomy Picture of the Day</a></i> (APOD) web site may be copyrighted. <a rel="nofollow" class="external autonumber" href="https://apod.nasa.gov/apod/lib/about_apod.html#srapply">[3]</a></li>
</small><li><small>The <a href="https://en.wikipedia.org/wiki/National_Space_Science_Data_Center" class="extiw" title="w:National Space Science Data Center">National Space Science Data Center</a> (NSSDC) site has been known to host <a href="//commons.wikimedia.org/wiki/Commons:Village_pump/Copyright/Archive/2014/08#Copyright_status_of_File:Venera_13_-_ven13right.png" title="Commons:Village pump/Copyright/Archive/2014/08">copyrighted content</a>. Its <a rel="nofollow" class="external text" href="https://nssdc.gsfc.nasa.gov/photo_gallery/photogallery-faq.html#use">photo gallery FAQ</a> states that all of the images in the photo gallery are in the public domain "Unless otherwise noted."</small></li></ul></td></tr></tbody></table><h2><span class="mw-headline" id="Original_upload_log">Original upload log</span></h2><p>
Transferred from <span class="plainlinks"><a class="external text" href="https://en.wikipedia.org">en.wikipedia</a></span> to Commons by <a href="//commons.wikimedia.org/w/index.php?title=User:FSII&amp;action=edit&amp;redlink=1" class="new" title="User:FSII (page does not exist)">FSII</a> using <a href="https://iw.toolforge.org/commonshelper/" class="extiw" title="toollabs:commonshelper/">CommonsHelper</a>. </p><div lang="en" dir="ltr" class="description en" style="display:inline;">The original description page was <a class="external text" href="https://en.wikipedia.org/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg">here</a>. All following user names refer to en.wikipedia.</div>
<ul><li>2011-05-04 11:23 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (15180 bytes) <i>fixed chacterized -&gt; characterized</i></li>
<li>2009-12-27 08:44 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (15143 bytes) <i>Bolt titles</i></li>
<li>2009-12-26 12:01 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (14420 bytes) <i></i></li>
<li>2009-12-26 11:59 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (17026 bytes) <i>SVG version of http://en.wikipedia.org/wiki/File:Characteristics_of_the_Maturity_levels.jpg which is snapshot from http://software.gsfc.nasa.gov/docs/What%20is%20CMMI.ppt </i></li></ul><!--
NewPP limit report
Parsed by mw1376
Cached time: 20211209182319
Cache expiry: 1814400
Reduced expiry: false
Complications: []
CPU time usage: 0.178 seconds
Real time usage: 0.232 seconds
Preprocessor visited node count: 1006/1000000
Postexpand include size: 19999/2097152 bytes
Template argument size: 3322/2097152 bytes
Highest expansion depth: 14/40
Expensive parser function count: 3/500
Unstrip recursion depth: 0/20
Unstrip postexpand size: 219/5000000 bytes
Lua time usage: 0.068/10.000 seconds
Lua memory usage: 853854/52428800 bytes
Number of Wikibase entities loaded: 1/400
--><!--
Transclusion expansion time report (%,ms,calls,template)
100.00% 181.340 1 -total
43.21% 78.349 1 Template:Information
42.27% 76.660 3 Template:Autotranslate
25.41% 46.073 1 Template:PD-USGov-NASA
14.62% 26.514 1 Template:Transferred_from
14.51% 26.320 1 Template:PD-USGov-NASA/layout
14.11% 25.588 1 Template:Original_description_page
7.16% 12.983 1 Template:En
6.60% 11.960 2 Template:Tl
5.16% 9.357 2 Template:T/main
--><!-- Saved in parser cache with key commonswiki:pcache:idhash:16790845-0!canonical and timestamp 20211209182319 and revision id 170613065. Serialized with JSON.
--></div></div>
<h2 id="filehistory">File history</h2>
<div id="mw-imagepage-section-filehistory">
<p>Click on a date/time to view the file as it appeared at that time.
</p>
<table class="wikitable filehistory">
<tr><th></th><th>Date/Time</th><th>Thumbnail</th><th>Dimensions</th><th>User</th><th>Comment</th></tr>
<tr><td>current</td><td class='filehistory-selected' style='white-space: nowrap;'><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg">01:58, 13 October 2011</a></td><td><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg"><img alt="Thumbnail for version as of 01:58, 13 October 2011" src="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/120px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="120" height="90" data-file-width="800" data-file-height="600" /></a></td><td>800 × 600 <span style="white-space: nowrap;">(15 KB)</span></td><td>Three d dave</td><td dir="ltr">Corrects spelling and pluralization; also nudges labels to a more uniform spacing.</td></tr>
<tr><td></td><td style='white-space: nowrap;'><a href="//upload.wikimedia.org/wikipedia/commons/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg">10:18, 30 September 2011</a></td><td><a href="//upload.wikimedia.org/wikipedia/commons/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg"><img alt="Thumbnail for version as of 10:18, 30 September 2011" src="//upload.wikimedia.org/wikipedia/commons/thumb/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg/120px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="120" height="90" data-file-width="800" data-file-height="600" /></a></td><td>800 × 600 <span style="white-space: nowrap;">(15 KB)</span></td><td>File Upload Bot (Magnus Manske)</td><td dir="ltr"> {{BotMoveToCommons|en.wikipedia|year={{subst:CURRENTYEAR}}|month={{subst:CURRENTMONTHNAME}}|day={{subst:CURRENTDAY}}}} {{Information |Description={{en|&#039;&#039;no original description&#039;&#039;}} |Source=Transferred from [http://en.wikipedia.org en.wikipedia]; transfer</td></tr>
</table>
</div>
<h2 id="filelinks">File usage</h2>
<div id='mw-imagepage-section-linkstoimage'>
<div class="linkstoimage" id="linkstoimage">The following pages on the English Wikipedia use this file (pages on other projects are not listed):</div><ul class="mw-imagepage-linkstoimage">
<li class="mw-imagepage-linkstoimage-ns0"><a href="/wiki/Capability_Maturity_Model_Integration" title="Capability Maturity Model Integration">Capability Maturity Model Integration</a></li>
</ul>
</div>
<h2 id="globalusage">Global file usage</h2>
<div id="mw-imagepage-section-globalusage"><p>The following other wikis use this file:
</p><ul>
<li class='mw-gu-onwiki-ar_wikipedia_org'>Usage on ar.wikipedia.org
<ul> <li><a class="external" href="https://ar.wikipedia.org/wiki/%D8%AA%D9%83%D8%A7%D9%85%D9%84_%D9%86%D9%85%D9%88%D8%B0%D8%AC_%D9%86%D8%B6%D9%88%D8%AC_%D8%A7%D9%84%D9%85%D9%82%D8%AF%D8%B1%D8%A9">تكامل نموذج نضوج المقدرة</a></li>
</ul></li>
<li class='mw-gu-onwiki-da_wikipedia_org'>Usage on da.wikipedia.org
<ul> <li><a class="external" href="https://da.wikipedia.org/wiki/Capability_Maturity_Model">Capability Maturity Model</a></li>
</ul></li>
<li class='mw-gu-onwiki-de_wikipedia_org'>Usage on de.wikipedia.org
<ul> <li><a class="external" href="https://de.wikipedia.org/wiki/Capability_Maturity_Model">Capability Maturity Model</a></li>
<li><a class="external" href="https://de.wikipedia.org/wiki/Capability_Maturity_Model_Integration">Capability Maturity Model Integration</a></li>
</ul></li>
<li class='mw-gu-onwiki-fa_wikipedia_org'>Usage on fa.wikipedia.org
<ul> <li><a class="external" href="https://fa.wikipedia.org/wiki/%D9%85%D8%AF%D9%84_%D8%A8%D9%84%D9%88%D8%BA_%D9%82%D8%A7%D8%A8%D9%84%DB%8C%D8%AA_%DB%8C%DA%A9%D9%BE%D8%A7%D8%B1%DA%86%D9%87">مدل بلوغ قابلیت یکپارچه</a></li>
</ul></li>
<li class='mw-gu-onwiki-meta_wikimedia_org'>Usage on meta.wikimedia.org
<ul> <li><a class="external" href="https://meta.wikimedia.org/wiki/Talk:Strategy/Wikimedia_movement/2018-20/Recommendations/Iteration_1/Diversity/2">Talk:Strategy/Wikimedia movement/2018-20/Recommendations/Iteration 1/Diversity/2</a></li>
</ul></li>
<li class='mw-gu-onwiki-ru_wikipedia_org'>Usage on ru.wikipedia.org
<ul> <li><a class="external" href="https://ru.wikipedia.org/wiki/%D0%A3%D1%80%D0%BE%D0%B2%D0%BD%D0%B8_%D0%B7%D1%80%D0%B5%D0%BB%D0%BE%D1%81%D1%82%D0%B8_%D1%83%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F">Уровни зрелости управления</a></li>
</ul></li>
<li class='mw-gu-onwiki-sv_wikipedia_org'>Usage on sv.wikipedia.org
<ul> <li><a class="external" href="https://sv.wikipedia.org/wiki/Wikipedia:Bybrunnen/Arkiv_2018-10">Wikipedia:Bybrunnen/Arkiv 2018-10</a></li>
</ul></li>
<li class='mw-gu-onwiki-www_wikidata_org'>Usage on www.wikidata.org
<ul> <li><a class="external" href="https://www.wikidata.org/wiki/Property_talk:P5587">Property talk:P5587</a></li>
<li><a class="external" href="https://www.wikidata.org/wiki/User:Salgo60/ExternalIdentifiers">User:Salgo60/ExternalIdentifiers</a></li>
</ul></li>
<li class='mw-gu-onwiki-zh_wikipedia_org'>Usage on zh.wikipedia.org
<ul> <li><a class="external" href="https://zh.wikipedia.org/wiki/%E8%83%BD%E5%8A%9B%E6%88%90%E7%86%9F%E5%BA%A6%E6%A8%A1%E5%9E%8B%E9%9B%86%E6%88%90">能力成熟度模型集成</a></li>
</ul></li>
</ul>
</div><h2 id="metadata">Metadata</h2>
<div class="mw-imagepage-section-metadata"><p>This file contains additional information, probably added from the digital camera or scanner used to create or digitize it.
</p><p>
If the file has been modified from its original state, some details may not fully reflect the modified file.</p><table id="mw_metadata" class="mw_metadata collapsed">
<tbody><tr class="exif-imagewidth mw-metadata-collapsible"><th>Width</th><td>800</td></tr><tr class="exif-imagelength mw-metadata-collapsible"><th>Height</th><td>600</td></tr></tbody></table>
</div><noscript><img src="//en.wikipedia.org/wiki/Special:CentralAutoLogin/start?type=1x1" alt="" title="" width="1" height="1" style="border: none; position: absolute;" /></noscript>
<div class="printfooter">Retrieved from "<a dir="ltr" href="https://en.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg">https://en.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg</a>"</div></div>
<div id="catlinks" class="catlinks catlinks-allhidden" data-mw="interface"></div>
</div>
</div>
<div id='mw-data-after-content'>
<div class="read-more-container"></div>
</div>
<div id="mw-navigation">
<h2>Navigation menu</h2>
<div id="mw-head">
<nav id="p-personal" class="mw-portlet mw-portlet-personal vector-user-menu-legacy vector-menu" aria-labelledby="p-personal-label" role="navigation"
>
<h3 id="p-personal-label" aria-label="" class="vector-menu-heading">
<span>Personal tools</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="pt-anonuserpage" class="mw-list-item"><span>Not logged in</span></li><li id="pt-anontalk" class="mw-list-item"><a href="/wiki/Special:MyTalk" title="Discussion about edits from this IP address [n]" accesskey="n"><span>Talk</span></a></li><li id="pt-anoncontribs" class="mw-list-item"><a href="/wiki/Special:MyContributions" title="A list of edits made from this IP address [y]" accesskey="y"><span>Contributions</span></a></li><li id="pt-createaccount" class="mw-list-item"><a href="/w/index.php?title=Special:CreateAccount&amp;returnto=File%3ACharacteristics+of+Capability+Maturity+Model.svg" title="You are encouraged to create an account and log in; however, it is not mandatory"><span>Create account</span></a></li><li id="pt-login" class="mw-list-item"><a href="/w/index.php?title=Special:UserLogin&amp;returnto=File%3ACharacteristics+of+Capability+Maturity+Model.svg" title="You&#039;re encouraged to log in; however, it&#039;s not mandatory. [o]" accesskey="o"><span>Log in</span></a></li></ul>
</div>
</nav>
<div id="left-navigation">
<nav id="p-namespaces" class="mw-portlet mw-portlet-namespaces vector-menu vector-menu-tabs" aria-labelledby="p-namespaces-label" role="navigation"
>
<h3 id="p-namespaces-label" aria-label="" class="vector-menu-heading">
<span>Namespaces</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="ca-nstab-image" class="selected mw-list-item"><a href="/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" title="View the file page [c]" accesskey="c"><span>File</span></a></li><li id="ca-talk" class="new mw-list-item"><a href="/w/index.php?title=File_talk:Characteristics_of_Capability_Maturity_Model.svg&amp;action=edit&amp;redlink=1" rel="discussion" title="Discuss improvements to the content page (page does not exist) [t]" accesskey="t"><span>Talk</span></a></li></ul>
</div>
</nav>
<nav id="p-variants" class="mw-portlet mw-portlet-variants emptyPortlet vector-menu-dropdown-noicon vector-menu vector-menu-dropdown" aria-labelledby="p-variants-label" role="navigation"
>
<input type="checkbox"
id="p-variants-checkbox"
role="button"
aria-haspopup="true"
data-event-name="ui.dropdown-p-variants"
class="vector-menu-checkbox" aria-labelledby="p-variants-label" />
<h3 id="p-variants-label" aria-label="Change language variant" class="vector-menu-heading">
<span>Variants</span>
<span class="vector-menu-checkbox-expanded">expanded</span>
<span class="vector-menu-checkbox-collapsed">collapsed</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
</div>
</nav>
</div>
<div id="right-navigation">
<nav id="p-views" class="mw-portlet mw-portlet-views vector-menu vector-menu-tabs" aria-labelledby="p-views-label" role="navigation"
>
<h3 id="p-views-label" aria-label="" class="vector-menu-heading">
<span>Views</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="ca-view" class="selected mw-list-item"><a href="/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"><span>Read</span></a></li><li id="ca-view-foreign" class="mw-list-item"><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"><span>View on Commons</span></a></li></ul>
</div>
</nav>
<nav id="p-cactions" class="mw-portlet mw-portlet-cactions emptyPortlet vector-menu-dropdown-noicon vector-menu vector-menu-dropdown" aria-labelledby="p-cactions-label" role="navigation" title="More options"
>
<input type="checkbox"
id="p-cactions-checkbox"
role="button"
aria-haspopup="true"
data-event-name="ui.dropdown-p-cactions"
class="vector-menu-checkbox" aria-labelledby="p-cactions-label" />
<h3 id="p-cactions-label" aria-label="" class="vector-menu-heading">
<span>More</span>
<span class="vector-menu-checkbox-expanded">expanded</span>
<span class="vector-menu-checkbox-collapsed">collapsed</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
</div>
</nav>
<div id="p-search" role="search" class=" vector-search-box">
<div>
<h3 >
<label for="searchInput">Search</label>
</h3>
<form action="/w/index.php" id="searchform"
class="vector-search-box-form">
<div id="simpleSearch"
class="vector-search-box-inner"
data-search-loc="header-navigation">
<input class="vector-search-box-input"
type="search" name="search" placeholder="Search Wikipedia" aria-label="Search Wikipedia" autocapitalize="sentences" title="Search Wikipedia [f]" accesskey="f" id="searchInput"
/>
<input type="hidden" name="title" value="Special:Search"/>
<input id="mw-searchButton"
class="searchButton mw-fallbackSearchButton" type="submit" name="fulltext" title="Search Wikipedia for this text" value="Search" />
<input id="searchButton"
class="searchButton" type="submit" name="go" title="Go to a page with this exact name if it exists" value="Go" />
</div>
</form>
</div>
</div>
</div>
</div>
<div id="mw-panel">
<div id="p-logo" role="banner">
<a class="mw-wiki-logo" href="/wiki/Main_Page"
title="Visit the main page"></a>
</div>
<nav id="p-navigation" class="mw-portlet mw-portlet-navigation vector-menu vector-menu-portal portal" aria-labelledby="p-navigation-label" role="navigation"
>
<h3 id="p-navigation-label" aria-label="" class="vector-menu-heading">
<span>Navigation</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="n-mainpage-description" class="mw-list-item"><a href="/wiki/Main_Page" title="Visit the main page [z]" accesskey="z"><span>Main page</span></a></li><li id="n-contents" class="mw-list-item"><a href="/wiki/Wikipedia:Contents" title="Guides to browsing Wikipedia"><span>Contents</span></a></li><li id="n-currentevents" class="mw-list-item"><a href="/wiki/Portal:Current_events" title="Articles related to current events"><span>Current events</span></a></li><li id="n-randompage" class="mw-list-item"><a href="/wiki/Special:Random" title="Visit a randomly selected article [x]" accesskey="x"><span>Random article</span></a></li><li id="n-aboutsite" class="mw-list-item"><a href="/wiki/Wikipedia:About" title="Learn about Wikipedia and how it works"><span>About Wikipedia</span></a></li><li id="n-contactpage" class="mw-list-item"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us" title="How to contact Wikipedia"><span>Contact us</span></a></li><li id="n-sitesupport" class="mw-list-item"><a href="https://donate.wikimedia.org/wiki/Special:FundraiserRedirector?utm_source=donate&amp;utm_medium=sidebar&amp;utm_campaign=C13_en.wikipedia.org&amp;uselang=en" title="Support us by donating to the Wikimedia Foundation"><span>Donate</span></a></li></ul>
</div>
</nav>
<nav id="p-interaction" class="mw-portlet mw-portlet-interaction vector-menu vector-menu-portal portal" aria-labelledby="p-interaction-label" role="navigation"
>
<h3 id="p-interaction-label" aria-label="" class="vector-menu-heading">
<span>Contribute</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="n-help" class="mw-list-item"><a href="/wiki/Help:Contents" title="Guidance on how to use and edit Wikipedia"><span>Help</span></a></li><li id="n-introduction" class="mw-list-item"><a href="/wiki/Help:Introduction" title="Learn how to edit Wikipedia"><span>Learn to edit</span></a></li><li id="n-portal" class="mw-list-item"><a href="/wiki/Wikipedia:Community_portal" title="The hub for editors"><span>Community portal</span></a></li><li id="n-recentchanges" class="mw-list-item"><a href="/wiki/Special:RecentChanges" title="A list of recent changes to Wikipedia [r]" accesskey="r"><span>Recent changes</span></a></li><li id="n-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_Upload_Wizard" title="Add images or other media for use on Wikipedia"><span>Upload file</span></a></li></ul>
</div>
</nav>
<nav id="p-tb" class="mw-portlet mw-portlet-tb vector-menu vector-menu-portal portal" aria-labelledby="p-tb-label" role="navigation"
>
<h3 id="p-tb-label" aria-label="" class="vector-menu-heading">
<span>Tools</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="t-whatlinkshere" class="mw-list-item"><a href="/wiki/Special:WhatLinksHere/File:Characteristics_of_Capability_Maturity_Model.svg" title="List of all English Wikipedia pages containing links to this page [j]" accesskey="j"><span>What links here</span></a></li><li id="t-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_Upload_Wizard" title="Upload files [u]" accesskey="u"><span>Upload file</span></a></li><li id="t-specialpages" class="mw-list-item"><a href="/wiki/Special:SpecialPages" title="A list of all special pages [q]" accesskey="q"><span>Special pages</span></a></li><li id="t-print" class="mw-list-item"><a href="javascript:print();" rel="alternate" title="Printable version of this page [p]" accesskey="p"><span>Printable version</span></a></li><li id="t-info" class="mw-list-item"><a href="/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg&amp;action=info" title="More information about this page"><span>Page information</span></a></li></ul>
</div>
</nav>
<nav id="p-lang" class="mw-portlet mw-portlet-lang vector-menu vector-menu-portal portal" aria-labelledby="p-lang-label" role="navigation"
>
<h3 id="p-lang-label" aria-label="" class="vector-menu-heading">
<span>Languages</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
<div class="after-portlet after-portlet-lang"><span class="uls-after-portlet-link"></span></div>
</div>
</nav>
</div>
</div>
<footer id="footer" class="mw-footer" role="contentinfo" >
<ul id="footer-info">
</ul>
<ul id="footer-places">
<li id="footer-places-privacy"><a href="https://foundation.wikimedia.org/wiki/Privacy_policy" class="extiw" title="wmf:Privacy policy">Privacy policy</a></li>
<li id="footer-places-about"><a href="/wiki/Wikipedia:About" title="Wikipedia:About">About Wikipedia</a></li>
<li id="footer-places-disclaimer"><a href="/wiki/Wikipedia:General_disclaimer" title="Wikipedia:General disclaimer">Disclaimers</a></li>
<li id="footer-places-contact"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us">Contact Wikipedia</a></li>
<li id="footer-places-mobileview"><a href="//en.m.wikipedia.org/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg&amp;mobileaction=toggle_view_mobile" class="noprint stopMobileRedirectToggle">Mobile view</a></li>
<li id="footer-places-developers"><a href="https://www.mediawiki.org/wiki/Special:MyLanguage/How_to_contribute">Developers</a></li>
<li id="footer-places-statslink"><a href="https://stats.wikimedia.org/#/en.wikipedia.org">Statistics</a></li>
<li id="footer-places-cookiestatement"><a href="https://foundation.wikimedia.org/wiki/Cookie_statement">Cookie statement</a></li>
</ul>
<ul id="footer-icons" class="noprint">
<li id="footer-copyrightico"><a href="https://wikimediafoundation.org/"><img src="/static/images/footer/wikimedia-button.png" srcset="/static/images/footer/wikimedia-button-1.5x.png 1.5x, /static/images/footer/wikimedia-button-2x.png 2x" width="88" height="31" alt="Wikimedia Foundation" loading="lazy" /></a></li>
<li id="footer-poweredbyico"><a href="https://www.mediawiki.org/"><img src="/static/images/footer/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki" srcset="/static/images/footer/poweredby_mediawiki_132x47.png 1.5x, /static/images/footer/poweredby_mediawiki_176x62.png 2x" width="88" height="31" loading="lazy"/></a></li>
</ul>
</footer>
<script>(RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgPageParseReport":{"limitreport":{"cputime":"0.001","walltime":"0.001","ppvisitednodes":{"value":2,"limit":1000000},"postexpandincludesize":{"value":0,"limit":2097152},"templateargumentsize":{"value":0,"limit":2097152},"expansiondepth":{"value":1,"limit":40},"expensivefunctioncount":{"value":0,"limit":500},"unstrip-depth":{"value":0,"limit":20},"unstrip-size":{"value":0,"limit":5000000},"entityaccesscount":{"value":0,"limit":400},"timingprofile":["100.00% 0.000 1 -total"]},"cachereport":{"origin":"mw1435","timestamp":"20211213104815","ttl":1814400,"transientcontent":false}}});mw.config.set({"wgBackendResponseTime":246,"wgHostname":"mw1435"});});</script>
</body>
</html>

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.9 MiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 3.5 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 38 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 28 KiB

View file

@ -1,6 +1,6 @@
# Using AI for Threat Modeling
[Create a threat analysis chatbot](../../Various/Create%20a%20threat%20analysis%20chatbot.md)
[Create a threat analysis chatbot](../Various/Create%20a%20threat%20analysis%20chatbot.md)
[PLOT4AI](https://plot4.ai) (Privacy Library Of Threats 4 Artificial Intelligence): A threat modeling library to help you build responsible AI

View file

@ -1,11 +1,11 @@
See also:
- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
- [Identity and Access Management (IAM)](../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
- [RBAC Access levels](../../Literature%20notes/RBAC%20Access%20levels.md)
- [RBAC Access levels](RBAC%20Access%20levels.md)
- [CRUD Matrices](../Information%20Security/CRUD%20Matrices.md)
Source: [](../../Attachments/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf)
Source: [](../Information%20Security/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf)
- Mandatory Access Control (MAC):
- Every object gets a label

View file

@ -0,0 +1,13 @@
# Access Control
While [authorization](../Standards/ISO27x/Authorization.md) is primarily concerned with establishing the policies and rules that dictate access (i.e. *what* a person or system is allowed to do), **access control** is the _system_ or _process_ that enforces those defined permissions.
See:
- [Gedachten over rechtenstructuren](../Information%20Security/Gedachten%20over%20rechtenstructuren.md)
- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
- [Access Control Models](Access%20Control%20Models.md)
- [ISO 27001 A 9 Access control](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%209%20Access%20control.md)
- [a-5.15-Access-control](../Standards/ISO27x/OST/27002/EN/a-5.15-Access-control.md)

View file

@ -1,3 +1,5 @@
# Asset Types in NIST
Asked ChatGPT on 3 april 2024
The National Institute of Standards and Technology (NIST) defines several categories or types of assets under its guidelines for managing and protecting information systems. They include:

View file

Before

Width:  |  Height:  |  Size: 96 KiB

After

Width:  |  Height:  |  Size: 96 KiB

Before After
Before After

View file

@ -1,7 +1,4 @@
---
aliases:
- Secure data lifecyle
---
# Asset lifecycle
## Asset mgt implementation
Source: Defensive Security Handbook: Best Practices for Securing Infrastructure by Lee Brotherston, Amanda Berlin
@ -16,7 +13,7 @@ Each department or person involved in each step should understand when and how a
Track changes, monitor and report
![](secure_data_lifecycle.jpeg)
![](../Various/Business%20processes/secure_data_lifecycle.jpeg)

View file

@ -60,7 +60,7 @@ ISO 27001 explicitly requires asset ownership in two controls:
When asset or process ownership is unclear, it can be determined by mapping the situation to one of four scenarios:
![](../rumc-eigenaarschap.png)
![](rumc-eigenaarschap.png)
@ -91,12 +91,12 @@ First, determine whether the asset/process is actually needed. The three institu
The source files reference the following related notes in the vault:
- [Vulnerability 1](../Vulnerability%201.md)
- [Threat](../../Literature%20notes/Threat.md)
- [Risks](../Risks.md)
- [Risk ownership](../Risk%20ownership.md)
- [Vulnerability](../Information%20Security/Risks/Vulnerability.md)
- [Threats MoC](../Information%20Security/Risks/Threats%20MoC.md)
- [Risks definitions](../Information%20Security/Risks/Risks%20definitions.md)
- [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md)
- [Control ownership](Control%20ownership.md)
- [Asset lifecycle](../../Literature%20notes/Asset%20lifecycle.md)
- [Asset lifecycle](Asset%20lifecycle.md)
- [How to develop an Asset Inventory](How%20to%20develop%20an%20Asset%20Inventory.md)

View file

@ -6,7 +6,7 @@ tags:
# Authorization vs. Access Control
[Authorization](../../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions.
[Authorization](../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions.
## Authorization
@ -23,8 +23,8 @@ tags:
- **What it is:** Access control is the **mechanism or system that enforces the authorization policies**. It's the technical implementation that actually grants or denies access to a resource based on the authorized permissions.
- **The "How":** It answers the question, "How is the 'what' actually applied and managed?"
- **Enforcement:** Access control is the act of putting those policies into practice. It involves:
- Checking a user's identity ([Authentication](../../Standards/ISO27x/Authentication.md)).
- Consulting the pre-defined [Authorization](../../Standards/ISO27x/Authorization.md)authorization rules.
- Checking a user's identity ([Authentication](../Standards/ISO27x/Authentication.md)).
- Consulting the pre-defined [Authorization](../Standards/ISO27x/Authorization.md)authorization rules.
- Granting or denying access to specific resources (files, applications, data, network segments, physical locations, etc.) or actions (read, write, delete, execute).
- **Examples:**
- An Access Control List (ACL) on a file system that specifies which users or groups can read, write, or execute a particular file.

View file

@ -2,7 +2,7 @@
A straightforward governance structure for your Information Security Management System based on ISO 27001 and ISO 27002.
*Based on [Governance model for Policies and Controls](../../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.*
*Based on [Governance model for Policies and Controls](../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.*
## Policy Lifecycle: Who Does What
### Key Players

View file

@ -8,17 +8,17 @@ A Business Impact Analysis (BIA) examines the potential impacts of disruptions,
The outcomes help to prioritize business activities and resources to enable the resumption of product and service delivery after a (major) disruption[^1].
Guidelines and tooling:
- [Guidelines for business impact analysis ISO 22317](../../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md)
- [Assessing reputational risks](../../Various/Assessing%20reputational%20risks.md)
- [BIA Workshop](../../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md)
- [TLP impact matrix](../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md)
- [Guidelines for business impact analysis ISO 22317](../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md)
- [Assessing reputational risks](../Various/Assessing%20reputational%20risks.md)
- [BIA Workshop](../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md)
- [TLP impact matrix](Data%20classification/Traffic%20Light%20Protocol%20TLP.md)
- Afhankelijkheid tussen systemen/voorzieningen?
- Resource Breakdown Structure (RBS)
- Fishbone Diagram (Ishikawa/Cause and Effect): Useful for identifying root causes of dependencies and resource constraints in processes.
ISO 27001 Controls:
- [5.29:](../../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption
- [5.30:](../../MoCs/ISO_27002_2022_5.30_MoC%20ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity
- [5.9:](../../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets regarding assets marked Critical on the Availability aspect
- [5.29:](../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption
- [5.30:](../Information%20Security/ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity
- [5.9:](../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets regarding assets marked Critical on the Availability aspect
[^1]: See [Disaster Recovery Planning](Disaster%20Recovery%20Planning.md)

View file

@ -1,6 +1,6 @@
# Classifying Integrity
See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification)
See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification)
Prompt to Perplexity AI on 2025-06-10: `In the field of information security, we identify and implement risk mitigating measures to safeguard the confidentiality, integrity, and availability of information. To establish levels of confidentiality, we use the instrument of data classification to establish levels of availability we can use business impact analysis. What instruments do we have to classify the necessity of integrity of information`

View file

@ -1,6 +1,6 @@
# Control ownership
See also [Risk ownership](../Risk%20ownership.md), [Asset ownership](Asset%20ownership.md)
See also [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md), [Asset ownership](Asset%20ownership.md)
Principe:
> Control ownership can best be assigned to the individual or team that has both the resources and the skills to effectively implement the control. (And does not have conflicting interests)

View file

@ -7,4 +7,4 @@ Previous work:
Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 16.1 Management of information security incidents and improvements](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)
- [ISO 27001 A 16.1 Management of information security incidents and improvements](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)

View file

@ -2,7 +2,7 @@
**Definition:**
"A *data classification* identifies the value of the data to the organization. Classification labels, the method by which they are assigned, and the required protection associated with the different labels, are identified in a policy."
Source: [CISSP_OSG_Chapter_5](../../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications)
Source: [CISSP_OSG_Chapter_5](../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications)
Classification criteria should be risk based, for instance on potential damage to the organization, the privacy of individuals, national security, economic interests, or other critical concerns.
@ -54,11 +54,11 @@ It does not solve the classification labeling problem if you have a single manda
See also:
[Datatags System](../../../Literature%20notes/Datatags%20System.md)
[Def_Sec_Handbook_Chapter_2](../../../Literature%20notes/Def_Sec_Handbook_Chapter_2.md#Information%20classification)
[ISO 27002:2022 NL A5.12](../../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md)
[Designing an information management scheme](../../../Literature%20notes/Designing%20an%20information%20management%20scheme.md)
[Key Topics for a policy on handling classified information](../../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md)
[Traffic Light Protocol (TLP)](../../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md)
[Datatags privacy oriented data classification system](Datatags%20privacy%20oriented%20data%20classification%20system.md)
[Def_Sec_Handbook_Chapter_2](../../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_2.md#Information%20classification)
[ISO 27002:2022 NL A5.12](../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md)
[Designing an information management scheme](../Designing%20an%20information%20management%20scheme.md)
[Key Topics for a policy on handling classified information](../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md)
[Traffic Light Protocol (TLP)](Traffic%20Light%20Protocol%20TLP.md)

View file

Before

Width:  |  Height:  |  Size: 634 KiB

After

Width:  |  Height:  |  Size: 634 KiB

Before After
Before After

View file

@ -3,12 +3,12 @@
Science. 2015101601. October 16, 2015. http://techscience.org/a/2015101601; PDF version attached: [](techsci-datatags-sweeneycrosasbarsinai.pdf).
Related:
- [ISO 27001 A 8.2 Information classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md)
- [Privacy 1](../Sparks/Privacy%201.md)
- [ISO 27001 A 8.2 Information classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md)
- [Privacy in ISO 27001](../../Standards/ISO27x/Privacy%20in%20ISO%2027001.md)
Sweeney at all have developed a privacy oriented data classification system with six levels:
Sweeney et all have developed a privacy oriented data classification system with six levels:
![](Datatags%20classification.jpg)
![](Datatags%20classification%20table.jpg)
*"Definitions for each of six datatags are introduced for demonstration purposes".*
The classification is based on a five level scheme designed and adopted by Harvard University for storing and transmitting research data.

View file

@ -0,0 +1,12 @@
# Examples of TLP document classification for different industries
- [for information security](FIRST%20TLP%20labeled%20document%20examples%20for%20information%20security.md)
- [for a commercial services organization](FIRST%20TLP%20labeled%20document%20examples%20commercial.md)
- [for a childcare organization](FIRST%20TLP%20labeled%20document%20examples%20childcare.md)
- [for a hospital](FIRST%20TLP%20labeled%20document%20examples%20hospital.md)
- [for a national government organization](FIRST%20TLP%20labeled%20document%20examples%20national%20government.md)
![](../../Information%20Security/Risks/TLP_Impact_matrix_NL.xlsx)

View file

@ -5,14 +5,14 @@ or: the FIRST TLP protocol
TLP provides a simple and intuitive schema for indicating when and how sensitive information can be shared, facilitating more frequent and effective collaboration. It employs four colors to indicate expected sharing boundaries to be applied by the recipient(s). ([source](https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage))
![](../Attachments/TLP_Impact_matrix_NL.xlsx)
![](../../Information%20Security/Risks/TLP_Impact_matrix_NL.xlsx)
[Examples of TLP document classification for different industries](Examples%20of%20TLP%20document%20classification%20for%20different%20industries.md)
[Examples of measures for different TLP classifications](Examples%20of%20measures%20for%20different%20TLP%20classifications.md)
[Voorbeelden van maatregelen bij verschillende TLP classificaties](Voorbeelden%20van%20maatregelen%20bij%20verschillende%20TLP%20classificaties.md)
[Dataclassificatie volgens TLP](../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md)
[Dataclassificatie volgens TLP](../../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md)

View file

@ -67,4 +67,4 @@
* Documenten worden gelabeld met TLP:RED
[^1]: Controls [5.19](../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]]
[^1]: Controls [5.19](../../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]]

View file

@ -1,3 +1,5 @@
# Designing an information management scheme
Related: [ISO_27002_2022_5.12_PE Classification of information](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.12_PE%20Classification%20of%20information.md)
Source: [ISMS Alliance](https://ismsalliance.com/trends/iso-27001-isms-risk-management/designing-an-information-management-scheme/)

View file

@ -0,0 +1,9 @@
# Disaster Recovery Planning
See also:
- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
- [Business Continuity Planning (BCP)](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
- [SANS Incident Response step 5 Recovery](../Standards/SANS/SANS%20Incident%20Response%20step%205%20Recovery.md)
- [Checklist for auditing Business Continuity and Disaster Recovery](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Business%20Continuity%20and%20Disaster%20Recovery.md)
- [CISSP_OSG_Chapter_18](../Standards/CISSP/CISSP_OSG_Chapter_18.md)
- [Def_Sec_Handbook_Chapter_6](../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_6.md)

View file

@ -1,3 +1,4 @@
# Functiescheiding: Typologie Starreveld
Voor fysieke assets zou de Typologie Starreveld gebruikt kunnen worden
https://www.typologiestarreveld.nl/controletechnische-functiescheiding/

View file

@ -3,11 +3,11 @@
https://www.isms.online/iso-27001/how-to-develop-an-asset-inventory-for-iso-27001/
Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 8.1.1 Inventory of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md)
- [ISO 27001 C 6.1.2 Information security risk assessment](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md)
- [ISO 27001 A 8.1.1 Inventory of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md)
- [ISO 27001 C 6.1.2 Information security risk assessment](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md)
See also:
- [Assets, Vulnerabilities, Threats, Risks](../../Literature%20notes/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
- [Assets, Vulnerabilities, Threats, Risks](../Information%20Security/Risks/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
# 3D Asset Inventory

View file

@ -6,5 +6,5 @@ The guideline does not prescribe how to audit, nor does it address the content o
Intended primarily for internal auditors and certification auditors working with ISO/IEC 27001-based ISMSs, it is also relevant to those assessing information service providers such as cloud and managed security vendors. The guidance draws on four decades of practitioner experience and is offered as a supplement to — not a replacement for — formal audit checklists and professional judgement.
![](../SecAware%20ISMS%20audit%20flags.docx)
![](SecAware%20ISMS%20audit%20flags.docx)

View file

Before

Width:  |  Height:  |  Size: 1.8 MiB

After

Width:  |  Height:  |  Size: 1.8 MiB

Before After
Before After

View file

Before

Width:  |  Height:  |  Size: 439 KiB

After

Width:  |  Height:  |  Size: 439 KiB

Before After
Before After

View file

Before

Width:  |  Height:  |  Size: 204 KiB

After

Width:  |  Height:  |  Size: 204 KiB

Before After
Before After

View file

@ -11,4 +11,4 @@ There's also a link here to different stakeholders with different interests. Thi
Related:
- [Labeling of information in the digital domain](Labeling%20of%20information%20in%20the%20digital%20domain.md).
- [Stakeholder Analysis](../Stakeholder%20Analysis.md)
- [Stakeholder Analysis](Stakeholder%20Analysis.md)

View file

@ -5,7 +5,7 @@ Article in ISACA Journal
Retrieved: July 13, 2022
See also:
- [Roles and Responsibilities](../Sparks/Roles%20and%20Responsibilities.md)
- [Roles and Responsibilities](Roles%20and%20Responsibilities.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
- [ISO_27002_2022_5.3_PE Segregation of duties](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.3_PE%20Segregation%20of%20duties.md)
@ -13,7 +13,7 @@ The most widely adopted SoD model requires separation between authorization (AUT
Ideally, these duties are performed by different persons (or parties).
![](SOD%20functions.jpg)
![](SOD%20functions%20diagram.jpg)
This model is consistent with the COBIT 5 view of SoD issues (DSS06.03).
@ -39,5 +39,5 @@ For defining role-based privileges, as used in Role-based Access Control (RBAC)
### Downloaded copy of document in Attachments folder
![](ISACA%20Implementing%20Segregation%20of%20Duties%201.pdf)
![](Implementing%20Segregation%20of%20Duties%20ISACA%20PDF.pdf)

View file

@ -2,7 +2,7 @@
tags:
- metrics
Related:
- "[ISO_27002_2022_5.24_PE Information security incident management planning and preparation](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)"
- "[ISO_27002_2022_5.24_PE Information security incident management planning and preparation](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.24_PE%20Information%20security%20incident%20management%20planning%20and%20preparation.md)"
---
# KPIs in Incident Response

View file

@ -1,4 +1,4 @@
[ISO 27001 A 8.2.2 Labelling of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
[ISO 27001 A 8.2.2 Labelling of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
For physical assets its straightforward: a restricted area sign on the door to the server room, a classified mark on a folder, a privacy sensitive sticker on a backup tape, etc.
@ -13,11 +13,11 @@ Labeling of digital information assets close to the source e.g. assign
Looking at it that way, any metadata that helps ensure the acceptable use and proper handling of information assets could be identified as labeling. A data dictionary that contains classification information could also be considered to use labeling.
Related:
- [ISO 27001 A 8.2.1 Classification of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
- [ISO 27001 A 8.1.3 Acceptable use of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [ISO 27001 A 8.2.1 Classification of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
- [ISO 27001 A 8.1.3 Acceptable use of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [[Enforcement tooling]]
[ISO 27001 A 8.2.2 Labelling of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
[ISO 27001 A 8.2.2 Labelling of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.2%20Labelling%20of%20information.md) makes procedures for information labelling in accordance with the classification scheme mandatory.
For physical assets its straightforward: a restricted area sign on the door to the server room, a classified mark on a folder, a privacy sensitive sticker on a backup tape, etc.
@ -32,6 +32,6 @@ Labeling of digital information assets close to the source e.g. assign
Looking at it that way, any metadata that helps ensure the acceptable use and proper handling of information assets could be identified as labeling. A data dictionary that contains classification information could also be considered to use labeling.
Related:
- [ISO 27001 A 8.2.1 Classification of information](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
- [ISO 27001 A 8.1.3 Acceptable use of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [ISO 27001 A 8.2.1 Classification of information](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2.1%20Classification%20of%20information.md)
- [ISO 27001 A 8.1.3 Acceptable use of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.3%20Acceptable%20use%20of%20assets.md)
- [[Enforcement tooling]]

View file

@ -1,9 +1,7 @@
---
tags:
- metrics
---
[Security Metrics by Andrew Jaquith 2007](Security%20Metrics%20by%20Andrew%20Jaquith%202007.md)
[Security Metrics that Count for Twilio](Security%20Metrics%20that%20Count%20%20for%20Twilio.md)
# Metrics for Information Security
[Security Metrics by Andrew Jaquith 2007](../Literature/Jaquith%20-%20Security%20Metrics/Security%20Metrics%20by%20Andrew%20Jaquith%202007.md)
[Security Metrics that Count for Twilio](../Literature/Jaquith%20-%20Security%20Metrics/Security%20Metrics%20that%20Count%20%20for%20Twilio.md)
[Austin Songer's List of Information Security Metrics to Track](https://songer.pro/list-of-information-security-metrics-to-track/)
@ -24,7 +22,7 @@ W. Krag Brotby and Gary Hinson (PRAGMATIC Security Metrics, 2013) state metrics
- Independent: Measured dispassionately and objectively, based on verifiable evidence; and
- Cost-effective: Generate more value than they cost to gather, analyze, present and use.
![](PRAGMATIC_security_metrics_examples.xlsx)
![](../Various/PRAGMATIC_security_metrics_examples.xlsx)
Standards and Frameworks:
- [ISO 27004](../Standards/ISO27x/ISO%2027004.md)

View file

@ -1,4 +1,6 @@
[ISO_27002_2022_5.1_PE Policies for information security](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.1_PE%20Policies%20for%20information%20security.md)
[Def_Sec_Handbook_Chapter_3](Def_Sec_Handbook_Chapter_3.md)
# Drafting Policies
[ISO_27002_2022_5.1_PE Policies for information security](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.1_PE%20Policies%20for%20information%20security.md)
[Def_Sec_Handbook_Chapter_3](../../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_3.md)
[DoD Cybersecurity Policy Chart webpage](https://csiac.org/resources/the-dod-cybersecurity-policy-chart/)
[DoD Cybersecurity Policy Chart download](https://csiac.org/wp-content/uploads/2022/11/2022-11-21-csiac-dod-cybersecurity-policy-chart.pdf)

View file

@ -1,9 +1,11 @@
# Drafting a Vendor and Product checklist
Related: [Vendor security MoC](..//Vendor%20security%20MoC.md)
ESCROW
BOM
From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.19_PE%20Information%20security%20in%20supplier%20relationships.md) (selection)
From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.19_PE%20Information%20security%20in%20supplier%20relationships.md) (selection)
- criteria and procedures for vendor selection, taking the sensitivity of products, services and the information they'll be working with into account.
- checking that the vendor has implemented adequate controls for information security, personnel security and physical security
- processes and procedures the vendor needs to implement for implementing and terminating the product/service in your organization
@ -12,7 +14,7 @@ From [ISO_27002_2022_5.19_PE Information security in supplier relationships](../
- the ownership of what has been developed during the relationship
- continuation of non-disclosure/confidentiallity agreements
From [ISO_27002_2022_5.21_PE Managing information security in the ICT supply chain](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.21_PE%20Managing%20information%20security%20in%20the%20ICT%20supply%20chain.md) (selection)
From [ISO_27002_2022_5.21_PE Managing information security in the ICT supply chain](../../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.21_PE%20Managing%20information%20security%20in%20the%20ICT%20supply%20chain.md) (selection)
- require that suppliers demand the same level of security for sub-contractors and product or component suppliers, as you demand of them
- request a 'bill of materials' for third party software components they use

View file

@ -1,4 +1,6 @@
*Voorbeeld van een artefact voor [A8.25 Secure development life cycle](../MoCs/ISO_27002_2022_8.25_MoC%20Secure%20development%20life%20cycle.md)*
*Voorbeeld van een artefact voor [A8.25 Secure development life cycle](../../MoCs/ISO_27002_2022_8.25_MoC%20Secure%20development%20life%20cycle.md)*
Bron: Normity
Omdat we werken met Kanban bepalen we zelf wanneer we een release gaan laten plaatsvinden. Dit doen we eventueel in overleg met de stakeholders en wordt per release bepaald. Gemiddeld genomen doen we dit eenmaal per 4 weken met regelmatige tussentijdse kleinere releases. De PO bepaalt uiteindelijk wanneer de release plaatsvindt. Hotfixes volgen deze procedure niet, maar hebben een eigen release proces. Omdat deze over het algemeen zeer klein zijn, wordt dit van geval tot geval bepaald.

View file

@ -1,5 +1,5 @@
Having a permissive vulnerability disclosure policy (VDP) encourages security research, and is a key characteristic of a good, mature security program. It encourages transparency.
For you as a vendor, it enhances [Vendor security MoC](Vendor%20security%20MoC.md) towards your customers.
As a customer, you may check for a VDP when creatingyour [Examples of vendor selection questionnaires](Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md).
For you as a vendor, it enhances [Vendor security MoC](../Vendor%20security%20MoC.md) towards your customers.
As a customer, you may check for a VDP when creatingyour [Examples of vendor selection questionnaires](../../Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md).

View file

@ -1,11 +1,3 @@
---
tags:
- iso27DIY
- appsec
- LLMgenerated
- WeWeb
---
# WeWeb Security Pre-Launch Checklist
I've created a comprehensive security checklist that expands on each of your original items. The key principle throughout is that **security must be enforced server-side** - WeWeb (being a frontend no-code platform) can only provide the user interface, while your backend APIs and database must handle all the actual security enforcement.

View file

@ -0,0 +1,13 @@
# Qualifying vs quantifying risks
**Qualifying risks** (qualitative risk assessment) involves describing and categorizing risks using descriptive scales or labels—such as rating likelihood as "low, medium, high" and impact as "minor, moderate, severe"—focusing on understanding the nature and relative severity of risks without precise numerical values.
**Quantifying risks** (quantitative risk assessment) involves measuring risks using specific numerical values—such as calculating the probability as a percentage (e.g., 15% chance per year) and impact in monetary terms (e.g., €50,000 loss)—providing precise, measurable data that can be used for detailed cost-benefit analysis and statistical modeling.
Clause 6.1.2 writes we should "assess the potential consequences" and "realistic likelihood" of risks occurring, but the standard doesn't say anything about *how* these should be established (just that that the chosen method must produce "consistent, valid and comparable results").
The core _requirements_ in ISO/IEC 27001 remain method-agnostic as long as the steps above are met and results are consistent and comparable.
The organization must set its own criteria for determining risk levels and risk acceptance criteria. The organization defines these elements based on its specific needs, size, structure, objectives, and risks.
The standard does not say anything about if qualitative or quantitative risk assessment should be applied.

View file

@ -1,3 +1,5 @@
# RASCI matrix
See also:
- [a-5.2-Information-security-roles-and-responsibilities](../Standards/ISO27x/OST/27002/EN/a-5.2-Information-security-roles-and-responsibilities.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)

View file

@ -1,3 +1,5 @@
# RBAC Access levels
In a Role-Based Access Control (RBAC) matrix, access levels are defined to specify what actions users can perform based on their assigned roles. The specific access levels may vary depending on the organization's needs and the complexity of its systems, but generally, the following access levels are commonly identified:
**No Access:**

View file

Before

Width:  |  Height:  |  Size: 106 KiB

After

Width:  |  Height:  |  Size: 106 KiB

Before After
Before After

View file

Before

Width:  |  Height:  |  Size: 535 KiB

After

Width:  |  Height:  |  Size: 535 KiB

Before After
Before After

View file

@ -1,4 +1,4 @@
# Responsibility assignment matrices
## RACI model
- Responsible works to perform the activity
- Accountable final approving authority, only one per task, must also ensure ensures the prerequisites of the task are met

View file

@ -0,0 +1,18 @@
# Risk analysis methods
See also under [Threat](../📚️%20Literature%20notes/Threat.md)
[Open Group Risk Analysis Standard (O-RA)](https://pubs.opengroup.org/security/o-ra/)
[Open Group FAIR \ ISO 27005 Cookbook for Risk Assessment](../Standards/ISO27x/FAIR%20ISO%2027005%20Cookbook.pdf)
[SURF Toolkit risicobeoordeling](../Standards/SURF%20Toolkit%20risicobeoordeling.md)
[](../Information%20Security/Risks/Risk_Assessment_Process.gif)
Related:
- [Assets, Vulnerabilities, Threats, Risks](../Information%20Security/Risks/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
- [Risk identification](../Information%20Security/Risks/Risk%20identification.md)
- [Def_Sec_Handbook_Chapter_1](../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_1.md)
- [Evaluating and Quantifying Cyber Risks using FAIR](https://www.protiviti.com/US-en/technology-consulting/cybersecurity/fair)
- [Factor Analysis of Information Risk (FAIR)](../Information%20Security/Risks/Factor%20Analysis%20of%20Information%20Risk%20(FAIR).md)

View file

@ -0,0 +1,11 @@
See also:
- [Roles in Information security management](../Information%20Security/Roles%20in%20Information%20security%20management.md)
- [Roles in Identity and Access Management (IAM)](../Information%20Security/Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)
- [Segregation of Duties](Segregation%20of%20Duties.md)
- [RASCI Matrix](RASCI%20Matrix.md)
- [a-5.2-Information-security-roles-and-responsibilities](../Standards/ISO27x/OST/27002/EN/a-5.2-Information-security-roles-and-responsibilities.md)
- [a-5.3-Segregation-of-duties](../Standards/ISO27x/OST/27002/EN/a-5.3-Segregation-of-duties.md)
# Ownership
See: [Asset ownership](Asset%20ownership.md), [Control ownership](Control%20ownership.md), [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md)

View file

Before

Width:  |  Height:  |  Size: 26 KiB

After

Width:  |  Height:  |  Size: 26 KiB

Before After
Before After

View file

Before

Width:  |  Height:  |  Size: 69 KiB

After

Width:  |  Height:  |  Size: 69 KiB

Before After
Before After

View file

Before

Width:  |  Height:  |  Size: 209 KiB

After

Width:  |  Height:  |  Size: 209 KiB

Before After
Before After

View file

@ -1,8 +1,6 @@
---
tags:
- project/iso27DIY
---
- [ ] Verdere samenhang destilleren uit HK beleidsdocumenten
# Samenhang tussen ISMS producten
- [ ] Verdere samenhang destilleren uit Humankind beleidsdocumenten
Risico is de schade die kan ontstaan doordat de BVI van informatie gecompromitteerd wordt.
Dit kan door een dreiging die gebruik maakt van een kwetsbaarheid.
@ -94,7 +92,7 @@ graph TD
Strategie --> Informatiebeveiligingsbeleid
```
![](ISMS/ISMS%20diagram.jpg)
![](ISMS%20diagram.jpg)
Id put policies and documentation on the right, business processes on the left, context, strategy and planning at the top, and controls at the bottom. RM/PDCA cycles at the center.

Some files were not shown because too many files have changed in this diff Show more