Cleaned up Literature folder

This commit is contained in:
Richard Kranendonk 2026-05-18 12:48:01 +02:00
parent 73a6380034
commit fe5eda4e05
586 changed files with 53911 additions and 2475 deletions

View file

@ -0,0 +1,5 @@
- Client/business owner: User, owner of the company, tech person, made responsible for ISO 27001
- Auditor
- Expert (Support role)
- Content Editor
- Administrator

View file

Before

Width:  |  Height:  |  Size: 54 KiB

After

Width:  |  Height:  |  Size: 54 KiB

Before After
Before After

View file

@ -1,4 +1,4 @@
- [The Art of Service](../The%20Art%20of%20Service.md) offers topical InfoSec Kanban boards - [The Art of Service](../Corpus/Sparks/The%20Art%20of%20Service.md) offers topical InfoSec Kanban boards
- 'Certificeringsadvies' offers independent external audits, they were employed by Networking4all - 'Certificeringsadvies' offers independent external audits, they were employed by Networking4all
- [Muddassir via Gumroad](https://community.gumroad.com/c/share-your-wins/boring-fields-like-supply-chains-can-be-creative-enough-to-sell-digital-products?login_token=RyhWoyqXw2kT5de2eNp6RYjL6U4NY1aKLPmS#comment_wrapper_4014940). Runs a site on SCM and has offered to cross post content. - [Muddassir via Gumroad](https://community.gumroad.com/c/share-your-wins/boring-fields-like-supply-chains-can-be-creative-enough-to-sell-digital-products?login_token=RyhWoyqXw2kT5de2eNp6RYjL6U4NY1aKLPmS#comment_wrapper_4014940). Runs a site on SCM and has offered to cross post content.

View file

@ -0,0 +1,22 @@
See also [Three user modes for AuditGlue](Three%20user%20modes%20for%20AuditGlue.md)
# Guided implementation mode
The 'guided implementation mode' will (roughly) resemble the structure and sequence of the [📼 ISO27DIY Video Series](../Corpus/Standards/ISO27x/legacy/iso27DIY%20mk%20I/📼%20ISO27DIY%20Video%20Series.md). This will be the reference for now.
# Operational mode
Here's the ISMS tool structure created in cooperation with Nedap: [Nedap ISMS tool structure](../Clients/Nedap%20ISMS%20tool%20structure.md).
There's also this [ISO 27001 structure diagram](../Corpus/Standards/ISO27x/legacy/iso27DIY%20mk%20I/ISO%2027001%20structure%20diagram.md).
See also the ISMS Tool and Overzicht beveiliging Excel sheets created for NHC:
- ![](../Corpus/ISMS/NHC%20ISMS%20tool_template%20nieuw.xlsx)
- ![](../Corpus/ISMS/NHC%20Overzicht%20beveiliging%20nieuw.xlsx)
# Audit mode
![](../Corpus/ISMS/NHC%20ISO%2027001%20Implementatie%20dashboard%20Annex%20A.xlsx)

View file

@ -3,4 +3,4 @@ Phil Odence of Black Duck / Synopsis
https://twitter.com/podence https://twitter.com/podence
https://www.linkedin.com/in/podence/ https://www.linkedin.com/in/podence/
Connectie van Richard ten Cate (The Red Button), die volgens mij sales voor Black Duck heeft gedaan. Connectie van Richard ten Cate (The Red Button), die volgens mij sales voor Black Duck heeft gedaan.
Zie ook [Software due diligence](Software%20due%20diligence.md). Zie ook [Software due diligence](../Corpus/Information%20Security/Software%20due%20diligence.md).

View file

@ -1,3 +1,4 @@
# Top 250 van NL groeiers
[NLgroeit](https://www.nlgroeit.nl/) heeft in oktober samen met de Erasmus universiteit een top 250 van NL groeiers [gepubliceerd](https://ece.nl/app/uploads/Top-250-Insight_report-EN.pdf). [NLgroeit](https://www.nlgroeit.nl/) heeft in oktober samen met de Erasmus universiteit een top 250 van NL groeiers [gepubliceerd](https://ece.nl/app/uploads/Top-250-Insight_report-EN.pdf).

View file

@ -1,9 +1,5 @@
--- # When to use JSON types in Supabase
tags:
- dbms
- dev
- design
---
Use JSON/JSONB columns in Supabase when you have these specific scenarios: Use JSON/JSONB columns in Supabase when you have these specific scenarios:
**Semi-structured data with varying schemas** - Perfect for user preferences, product attributes that differ by category, or configuration settings where each record might have different fields. For example, storing product metadata where electronics have different attributes than clothing. **Semi-structured data with varying schemas** - Perfect for user preferences, product attributes that differ by category, or configuration settings where each record might have different fields. For example, storing product metadata where electronics have different attributes than clothing.

View file

@ -1,8 +1,3 @@
---
tags:
- SupaBase
- json
---
PostgreSQL has excellent JSON support with dedicated JSON and JSONB data types. JSONB is particularly powerful as it stores JSON in a binary format thats faster to query. PostgreSQL offers extensive JSON operators and functions, GIN indexing for JSON fields, and the ability to mix relational and JSON data in the same database. PostgreSQL has excellent JSON support with dedicated JSON and JSONB data types. JSONB is particularly powerful as it stores JSON in a binary format thats faster to query. PostgreSQL offers extensive JSON operators and functions, GIN indexing for JSON fields, and the ability to mix relational and JSON data in the same database.
Supabase has excellent JSONB support since its built on PostgreSQL, which has one of the best JSON implementations among relational databases. Supabase has excellent JSONB support since its built on PostgreSQL, which has one of the best JSON implementations among relational databases.

View file

@ -429,7 +429,7 @@
"width":340, "width":340,
"height":80 "height":80
}, },
{"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200}, {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200},
{ {
"id":"1e6b25bf6dcb833e", "id":"1e6b25bf6dcb833e",
"type":"text", "type":"text",
@ -470,8 +470,8 @@
"width":1068, "width":1068,
"height":60 "height":60
}, },
{"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200}, {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
{"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200} {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200}
], ],
"edges":[], "edges":[],
"metadata":{ "metadata":{

59
AuditGlue/iso27DIY-MoC.md Normal file
View file

@ -0,0 +1,59 @@
---
tags:
- project/iso27DIY
- type/MoC
---
## Marketing source material
[ISO27DIY Solution and Components](../marketing/branding/ISO27DIY%20Solution%20and%20Components.md)
[Value Proposition Canvas for iso27DIY](../marketing/branding/Value%20Proposition%20Canvas%20for%20iso27DIY.md)
[Brand Values](../marketing/branding/Brand%20Values.md)
[FUD with Certification](../marketing/branding/FUD%20with%20Certification.md)
[PRD Product Requirements Document for iso27DYI](PRD%20Product%20Requirements%20Document%20for%20iso27DYI.md)
[iso27DIY Functional Diagram](System%20alternative/iso27DIY%20Functional%20Diagram.canvas)
[iso27DIY content modules](iso27DIY%20content%20modules.canvas)
## Marketing
[Pricing](../Corpus/Various/The%20Psychology%20Behind%20SaaS%20Pricing.md)
[[Pricing Tiers for iso27DIY|Tiers]]
[[SEO guide for Carrd|Website SEO]]
[Idea Validation](Idea%20Validation.md)
## Method
[Samenhang tussen ISMS producten](../Corpus/ISMS/Samenhang%20tussen%20ISMS%20producten.md)
[ISO 27001 2023 Processen en Artefacten](../Corpus/Standards/ISO27x/OST/ISO%2027001%202023%20Processen%20en%20Artefacten.md)
[Advised Documents for ISO 27001](../iso27DIY-gis/reference/Advised%20Documents%20for%20ISO%2027001.md)
[Examples of Proof for auditors](../Sparks/Examples%20of%20Proof%20for%20auditors.md)
[About ISO27DIY Policy Cards](../💡Permanent%20ideas/About%20ISO27DIY%20Policy%20Cards.md)
## Design
[Modules Canvas](iso27DIY%20content%20modules.canvas)
[About the flow](../Sparks/About%20iso27diy/About%20the%20flow.md)
[UI ideas](System%20alternative/iso27DIY%20UI%20ideas.md)
### Agents
[Create a proactive conversational agent](../Corpus/Various/Create%20a%20proactive%20conversational%20agent.md)
[Create an interview agent](../Corpus/Various/Create%20an%20interview%20agent.md)
[Agent Design Intent Card](System%20alternative/Agent%20Design%20Intent%20Card.md)
[Create a threat analysis chatbot](../Corpus/Various/Create%20a%20threat%20analysis%20chatbot.md)
[Instruct an LLM on available tools](../Corpus/Various/Instruct%20an%20LLM%20on%20available%20tools.md)
[LLM Prompt types](../Corpus/Various/LLM%20Prompt%20types.md)
## Content
[ISO27DIY Videos list](../🧱%20Projects/iso27DIY%20mk%20I/ISO27DIY%20Videos%20list.md)
## Platform
[Design Document for ISO 27001 Certification Support Online Service](../Corpus/Various/Design%20Document%20for%20ISO%2027001%20Certification%20Support%20Online%20Service.md)
[Personae and Roles](Personae%20and%20Roles.md)
[TypeDB structure for ISO27DIY](System%20alternative/TypeDB%20structure%20for%20ISO27DIY.md)
[Client segregation in SaaS](../Corpus/Information%20Security/Client%20segregation%20in%20SaaS.md)
[Building functionality in Supabase](../Corpus/Various/Building%20functionality%20in%20Supabase.md)
[SupaBase edge functions portability](System%20alternative/SupaBase%20edge%20functions%20portability.md)
[Connect LLM to Supabase to create content](../Corpus/Various/Connect%20LLM%20to%20Supabase%20to%20create%20content.md)
[Application architecture](../Corpus/Various/Application%20architecture.md)
[iso27DYI architecture with LLM](System%20alternative/iso27DYI%20architecture%20with%20LLM.md)
[iso27DIY stack deployment](System%20alternative/iso27DIY%20stack%20deployment.md)
[SurveyJS](../Corpus/Standards/SurveyJS.md)
[WeWeb Security Pre-Launch Checklist](../Corpus/ISMS/Policy%20examples/WeWeb%20Security%20Pre-Launch%20Checklist.md)

Binary file not shown.

After

Width:  |  Height:  |  Size: 54 KiB

View file

Before

Width:  |  Height:  |  Size: 70 KiB

After

Width:  |  Height:  |  Size: 70 KiB

Before After
Before After

View file

@ -10,7 +10,7 @@ Gebaseerd op:
Resultaten: Resultaten:
- [BIA resultaat in MIRO](BIA%20resultaat%20MIRO.pdf) - [BIA resultaat in MIRO](BIA%20resultaat%20MIRO.pdf)
- [Maximum Down Time systemen per proces](../../Corpus/Attachments/BIA%20resultaten.numbers) - [Maximum Down Time systemen per proces](../Humankind/BIA%20resultaten%20Humankind.numbers)
- [Rapportage in Word](250128%20Business%20Impact%20Analyse%20DAK.docx) - [Rapportage in Word](250128%20Business%20Impact%20Analyse%20DAK.docx)
## Deelnemers ## Deelnemers

View file

@ -35,7 +35,7 @@ Voorstelrondje (voor deelnemers die er in de vorige workshop ([BIA](BIA%20Worksh
In de workshop van vorige week hebben we gekeken hoe lang systemen gemist konden worden, voordat de verschillende bedrijfsprocessen hiervan schade ondervonden (en het dus meer werd dan 'erg onhandig'). In de workshop van vorige week hebben we gekeken hoe lang systemen gemist konden worden, voordat de verschillende bedrijfsprocessen hiervan schade ondervonden (en het dus meer werd dan 'erg onhandig').
Daarvan wil ik de resultaten nu met jullie delen: [Maximum Down Time systemen per proces](../../Corpus/Attachments/BIA%20resultaten.numbers). Daarvan wil ik de resultaten nu met jullie delen: [Maximum Down Time systemen per proces](../Humankind/BIA%20resultaten%20Humankind.numbers).
In deze sessie gaan we voor de kwetsbaarste processen kijken welke noodmaatregelen we kunnen inzetten als de meest kritische systemen uitvallen, hoe we die noodmaatregelen kunnen voorbereiden, wie we daarvoor nodig hebben, en hoe we gaan communiceren met de verschillende stakeholders over die noodmaatregelen. In deze sessie gaan we voor de kwetsbaarste processen kijken welke noodmaatregelen we kunnen inzetten als de meest kritische systemen uitvallen, hoe we die noodmaatregelen kunnen voorbereiden, wie we daarvoor nodig hebben, en hoe we gaan communiceren met de verschillende stakeholders over die noodmaatregelen.

View file

@ -51,7 +51,7 @@ Kwetsbaarheden gescoord volgens het Common Vulnerability Scoring System ([CVSS v
Voor het gebruik van de SA_VEEAM backup software is een Domain Administrator account aangemaakt. Dit geeft directe toegang geeft tot de volledige Active Directory-omgeving. Een aanvaller kan hiermee back-ups manipuleren, verwijderen of zelfs de volledige Active Directory overnemen. Het principe van least privilege lijkt niet te zijn toegepast Voor het gebruik van de SA_VEEAM backup software is een Domain Administrator account aangemaakt. Dit geeft directe toegang geeft tot de volledige Active Directory-omgeving. Een aanvaller kan hiermee back-ups manipuleren, verwijderen of zelfs de volledige Active Directory overnemen. Het principe van least privilege lijkt niet te zijn toegepast
Volgens Vitaen is dit 'in de meeste gevallen niet noodzakelijk en verhoogt het aanvalsoppervlak aanzienlijk': Volgens Vitaen is dit 'in de meeste gevallen niet noodzakelijk en verhoogt het aanvalsoppervlak aanzienlijk':
>Aangezien dit account vatbaar is voor een [Kerberoasting](../../Corpus/Sparks/Information%20Security/Kerberoasting.md) aanval, is het mogelijk gebleken de wachtwoord hash te bemachtigen. Het bleek echter niet mogelijk in de korte tijd dat de opdracht plaatsvond, om hiervan het wachtwoord te brute-forcen. >Aangezien dit account vatbaar is voor een [Kerberoasting](../../Corpus/Information%20Security/Kerberoasting.md) aanval, is het mogelijk gebleken de wachtwoord hash te bemachtigen. Het bleek echter niet mogelijk in de korte tijd dat de opdracht plaatsvond, om hiervan het wachtwoord te brute-forcen.
**Oplossingsrichting** **Oplossingsrichting**
> Vitaen adviseert om het principe van least privilege toe te passen: service accounts mogen alleen de rechten krijgen die strikt noodzakelijk zijn voor hun functionaliteit. Waar mogelijk moeten alternatieve oplossingen zoals Managed Service Accounts (MSA) of Group Managed Service Accounts (gMSA) worden gebruikt, die automatisch wachtwoorden roteren en minder risicovol zijn. Daarnaast moet het gebruik van service accounts met verhoogde rechten actief worden gemonitord en gelogd, zodat afwijkend gedrag direct wordt opgemerkt. > Vitaen adviseert om het principe van least privilege toe te passen: service accounts mogen alleen de rechten krijgen die strikt noodzakelijk zijn voor hun functionaliteit. Waar mogelijk moeten alternatieve oplossingen zoals Managed Service Accounts (MSA) of Group Managed Service Accounts (gMSA) worden gebruikt, die automatisch wachtwoorden roteren en minder risicovol zijn. Daarnaast moet het gebruik van service accounts met verhoogde rechten actief worden gemonitord en gelogd, zodat afwijkend gedrag direct wordt opgemerkt.

Binary file not shown.

After

Width:  |  Height:  |  Size: 54 KiB

View file

@ -459,9 +459,9 @@
"width":1068, "width":1068,
"height":60 "height":60
}, },
{"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200}, {"id":"ddfc9917c2c7fc66","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-408,"y":620,"width":278,"height":200},
{"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200}, {"id":"27d02011ccccb4c0","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":-19,"y":620,"width":278,"height":200},
{"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Corpus/Attachments/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200} {"id":"6c394a4088d586b3","type":"file","file":"iso27diy-corp/Canvas Method/Canvas Cyclus.png","x":382,"y":620,"width":278,"height":200}
], ],
"edges":[], "edges":[],
"metadata":{ "metadata":{

View file

@ -1,7 +1,7 @@
In gesprekken benoemde risico's In gesprekken benoemde risico's
Opnemen in Risico Register Opnemen in Risico Register
Zie [Risk Register Format](../../Corpus/Sparks/Risk%20Register%20Format.md) Zie [Risk Register Format](../../Corpus/Information%20Security/Risks/Risk%20Register%20Format.md)
- Belangrijkste risicos zitten bij email en gebruik van Teams (gastaccounts, policies, etc.), daarover komen de meeste incidentmeldingen. 80% van de attack vectors lopen via mail. - Belangrijkste risicos zitten bij email en gebruik van Teams (gastaccounts, policies, etc.), daarover komen de meeste incidentmeldingen. 80% van de attack vectors lopen via mail.

View file

@ -6,7 +6,7 @@
| Opstellen van beleid | | | | | | | Opstellen van beleid | | | | | |
| Goedkeuren van beleid | | | | | | | Goedkeuren van beleid | | | | | |
| Vertalen van beleid | | | | | | | Vertalen van beleid | | | | | |
Voor legenda zie [RASCI Matrix](../../Corpus/Sparks/RASCI%20Matrix.md) Voor legenda zie [RASCI Matrix](../../Corpus/ISMS/RASCI%20Matrix.md)
**Management** **Management**
- eindverantwoordelijk voor IB - eindverantwoordelijk voor IB

View file

@ -1,5 +1,5 @@
Deze tekst is gebaseerd op: Deze tekst is gebaseerd op:
- [Programma van Eisen Ubeoo ATS](../../Corpus/Attachments/Ubeeo%20ATS%20PvE%20240315.xlsx) - [Programma van Eisen Ubeoo ATS](Humankind%20Ubeeo%20ATS%20PvE%20240315.xlsx)
- [Eisen aan leveranciers en samenwerking uit de Architectuurprincipes Humankind](Eisen%20aan%20leveranciers%20en%20samenwerking%20uit%20de%20Architectuurprincipes%20Humankind.md) - [Eisen aan leveranciers en samenwerking uit de Architectuurprincipes Humankind](Eisen%20aan%20leveranciers%20en%20samenwerking%20uit%20de%20Architectuurprincipes%20Humankind.md)
# Basislijst Eisen en Wensen ICT leveranciers # Basislijst Eisen en Wensen ICT leveranciers

View file

@ -1,4 +1,4 @@
- [Programma van Eisen](../../Corpus/Attachments/Ubeeo%20ATS%20PvE%20240315.xlsx) - [Programma van Eisen](Humankind%20Ubeeo%20ATS%20PvE%20240315.xlsx)
- [](Ubeeo%20ATS%20SLA%20Service%20Level%20Agreement.pdf) - [](Ubeeo%20ATS%20SLA%20Service%20Level%20Agreement.pdf)
![](Ubeeo%20ATS%20SLA%20Service%20Level%20Agreement.pdf) ![](Ubeeo%20ATS%20SLA%20Service%20Level%20Agreement.pdf)

View file

@ -1,7 +1,7 @@
# Wachtwoordbeleid voor Humankind # Wachtwoordbeleid voor Humankind
Gebaseerd op [Sterke wachtwoorden in 2024](../../Corpus/Sparks/Sterke%20wachtwoorden%20in%202024.md). Gebaseerd op [Sterke wachtwoorden in 2024](../../Corpus/Information%20Security/Sterke%20wachtwoorden%20in%202024.md).
**Mail 'Sterke wachtwoorden in 2024' d.d. 13 februari 2025** **Mail 'Sterke wachtwoorden in 2024' d.d. 13 februari 2025**

View file

@ -1,5 +1,5 @@
Gebaseerd op: Gebaseerd op:
- [Dropbox Supplier Security Requirements](../../Corpus/Literature%20notes/Dropbox%20Supplier%20Security%20Requirements.md) - [Dropbox Supplier Security Requirements](../../Corpus/ISMS/Policy%20examples/Dropbox%20Supplier%20Security%20Requirements.md)
- Beveiligingsbeleid clouddiensten CIP versie 2.2. - Beveiligingsbeleid clouddiensten CIP versie 2.2.
- Security Technical IT Checklist ([STITCH](https://www.surf.nl/files/2022-03/stitch-1.1-2022_0.pdf)) van SURF.nl - Security Technical IT Checklist ([STITCH](https://www.surf.nl/files/2022-03/stitch-1.1-2022_0.pdf)) van SURF.nl

View file

@ -12,13 +12,13 @@ Doelstellingen/KPI's
- Methode risicoanalyse en -management (RAM) - Methode risicoanalyse en -management (RAM)
- Risicoanalyse en -management (RAM) - Risicoanalyse en -management (RAM)
- Maatregelen - Maatregelen
- Implementation planning; for inspiration, see [Topical InfoSec Kanbans](../Literature%20notes/Topical%20InfoSec%20Kanbans.md) - Implementation planning; for inspiration, see [Collection of Kanban boards on information security topics](../Corpus/Information%20Security/Collection%20of%20Kanban%20boards%20on%20information%20security%20topics.md)
- Monitoren en meten - Monitoren en meten
### STRUCTUUR ISMS ### STRUCTUUR ISMS
- Rollen - Rollen
- ISMS planning - ISMS planning
- for inspiration, see [Topical InfoSec Kanbans](../Literature%20notes/Topical%20InfoSec%20Kanbans.md) - for inspiration, see [Collection of Kanban boards on information security topics](../Corpus/Information%20Security/Collection%20of%20Kanban%20boards%20on%20information%20security%20topics.md)
Interne audit planning Interne audit planning

View file

@ -0,0 +1,6 @@
# Data classification: how to make labels stick?
Data travels; how to make labels stick?
Links to the [Privacy in ISO 27001](../../Corpus/Standards/ISO27x/Privacy%20in%20ISO%2027001.md) issue of [Data Provenance](../../Corpus/Standards/AVG/Data%20Provenance.md) .

View file

@ -0,0 +1,10 @@
# Hoe dwing je verantwoordelijkheid af?
Een universiteit biedt onderzoeksafdelingen de mogelijkheid om vrijelijk hun applicaties en databases op te tuigen binnen hun eigen Kubernetes containers. Daarbij zijn ze zelf verantwoordelijk voor de informatiebeveiliging daarvan.
Het is vervolgens aan de IT afdeling om de containers te deployen. Daarbij ontdekken ze dat veel containers / applicaties / databases onveilig geconfigureerd zijn, oude versies van software met bekende kwetsbaarheden herbergen, etc.
Mijn stelling is dat er voor het succesvolle delegeren van de verantwoordelijk voor informatiebeveiliging in ieder geval nodig is: een prikkel om het ook goed te doen (bijv. niet in beheer nemen, kosten in rekening brengen, kwaliteit van de beveiliging als KPI van de afdeling), en kennis en resources het uit te voeren (of financiele middelen om het te laten doen).
Is er literatuur beschikbaar over deze kwestie? Zijn er andere succesvoorwaarden bekend?

View file

@ -1,4 +1,4 @@
# Measures vs Workability: least privilege, need-to-know # Least privilege, need-to-know: principles vs practice
*Hypothesis: security frameworks promote least privilege and need-to-know for access control, while common dataclassification schemes and realworld practices frequently result in minimal or inconsistent protective measures until incidents or regulations force stricter controls.* *Hypothesis: security frameworks promote least privilege and need-to-know for access control, while common dataclassification schemes and realworld practices frequently result in minimal or inconsistent protective measures until incidents or regulations force stricter controls.*

View file

@ -1,3 +1,5 @@
# Perverse prikkels in de normindustrie
- Nodeloos complex geformuleerde norm, vereist consultants om hem begrijpbaar te maken - Nodeloos complex geformuleerde norm, vereist consultants om hem begrijpbaar te maken
- Consultants zijn er niet bij gebaat om de eenvoud te laten zien (want minder uren) - Consultants zijn er niet bij gebaat om de eenvoud te laten zien (want minder uren)
- Bestaande software vereist diepgaande domeinkennis om het te implementeren en te bedienen. Wordt veelal verkocht via partner kanalen (ISO 27001 consultants). - Bestaande software vereist diepgaande domeinkennis om het te implementeren en te bedienen. Wordt veelal verkocht via partner kanalen (ISO 27001 consultants).

View file

@ -1,3 +1,5 @@
# Privacy protection in Databases
[A deep dive into privacy-protecting databases by VentureBeat](https://venturebeat.com/business/a-deep-dive-into-privacy-protecting-databases/amp/) [A deep dive into privacy-protecting databases by VentureBeat](https://venturebeat.com/business/a-deep-dive-into-privacy-protecting-databases/amp/)
[Differential privacy](https://en.wikipedia.org/wiki/Differential_privacy?wprov=sfti1) [Differential privacy](https://en.wikipedia.org/wiki/Differential_privacy?wprov=sfti1)

View file

@ -1,3 +1,5 @@
# Voordelen van processvolwassenheid
Het CMM (Capability Maturity Model) streeft naar hogere procesvolwassenheid omdat volwassener processen een aantal concrete voordelen opleveren: Het CMM (Capability Maturity Model) streeft naar hogere procesvolwassenheid omdat volwassener processen een aantal concrete voordelen opleveren:
**Voorspelbaarheid** — je weet wat een proces oplevert, hoe lang het duurt en wat het kost. Verrassingen nemen af naarmate processen herhaalbaarder worden. **Voorspelbaarheid** — je weet wat een proces oplevert, hoe lang het duurt en wat het kost. Verrassingen nemen af naarmate processen herhaalbaarder worden.

View file

@ -1,9 +1,7 @@
--- # Weerbaarheid: bereid je voor op verstoring
tags:
- disruption *Engels: Planning for Disruption*
- Continuïteit
- resilience
---
De digitale weerbaarheid van een organisatie is een belangrijke factor in de bedrijfszekerheid. Die weerbaarheid bereik je enerzijds door je te beschermen tegen dreigingen, en anderzijds door de capaciteiten te bouwen waarmee je adequaat kunt reageren op incidenten en kunt herstellen van een aanval of storing. Goed beleid voor digitale weerbaarheid is een verplichting vanuit onder andere de NIS 2 en de ISO 27001 / NEN 7510. De digitale weerbaarheid van een organisatie is een belangrijke factor in de bedrijfszekerheid. Die weerbaarheid bereik je enerzijds door je te beschermen tegen dreigingen, en anderzijds door de capaciteiten te bouwen waarmee je adequaat kunt reageren op incidenten en kunt herstellen van een aanval of storing. Goed beleid voor digitale weerbaarheid is een verplichting vanuit onder andere de NIS 2 en de ISO 27001 / NEN 7510.
Dit document richt zich op het plannen voor, en het herstellen van, incidenten en verstoringen. Het beschrijft de vier bouwstenen om het opbouwen van weerbaarheid planmatig aan te pakken. Dit zijn: Dit document richt zich op het plannen voor, en het herstellen van, incidenten en verstoringen. Het beschrijft de vier bouwstenen om het opbouwen van weerbaarheid planmatig aan te pakken. Dit zijn:

Binary file not shown.

Before

Width:  |  Height:  |  Size: 87 KiB

View file

@ -1,48 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!-- Generated by Pixelmator Pro 3.3.8 -->
<svg width="308" height="325" viewBox="0 0 308 325" xmlns="http://www.w3.org/2000/svg">
<g id="layer1">
<g id="g3727">
<linearGradient id="linearGradient1" x1="176.583055" y1="139.141859" x2="176.583055" y2="-0.865585" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa801" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter1" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3729" fill="url(#linearGradient1)" fill-rule="evenodd" stroke="none" filter="url(#filter1)" d="M 41.743351 51.212738 C 42.150017 50.212677 81.490059 -0.787109 154.15152 -0.788086 C 241.369644 -0.789307 282.151245 71.210953 282.153748 73.212296 L 308.786102 58.010773 L 276.255157 139.199417 L 191.631668 122.876572 L 222.734482 105.581619 C 221.999237 104.369354 201.152359 67.227112 154.151062 66.710693 C 123.328072 66.372772 101.774658 86.241028 101.125603 86.815338 L 86.577553 44.750305 L 41.742172 51.212402 Z"/>
</g>
<g id="g3739">
<linearGradient id="linearGradient2" x1="201.674687" y1="324.901983" x2="201.674687" y2="97.00703" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa900" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter2" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3741" fill="url(#linearGradient2)" fill-rule="evenodd" stroke="none" filter="url(#filter2)" d="M 293.057343 97.134033 C 293.720062 97.986221 318.216492 157.554413 281.887238 220.480164 C 238.279953 296.012177 155.536804 295.329773 153.802383 294.331268 L 153.651047 324.995667 L 99.606407 256.230042 L 156.053131 191.106888 L 155.479507 226.689453 C 156.896957 226.658844 199.485641 227.176117 223.433105 186.730927 C 239.136978 160.206985 232.707489 131.607651 232.534653 130.758408 L 276.237122 139.191864 L 293.058228 97.133179 Z"/>
</g>
<g id="g3747">
<linearGradient id="linearGradient3" x1="65.034598" y1="291.714732" x2="65.034598" y2="44.594594" gradientUnits="userSpaceOnUse">
<stop offset="0" stop-color="#ffa801" stop-opacity="1"/>
<stop offset="1" stop-color="#ffcc01" stop-opacity="1"/>
</linearGradient>
<filter id="filter3" x="0" y="0" width="308" height="325" filterUnits="userSpaceOnUse" primitiveUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
<feFlood flood-color="#000000" flood-opacity="0.5"/>
<feComposite in2="SourceGraphic" operator="out"/>
<feGaussianBlur stdDeviation="5"/>
<feOffset dx="0" dy="2"/>
<feComposite in2="SourceGraphic" operator="atop"/>
</filter>
<path id="path3749" fill="url(#linearGradient3)" fill-rule="evenodd" stroke="none" filter="url(#filter3)" d="M 127.642105 291.814484 C 126.572731 291.96228 62.736691 283.39212 26.406387 220.466537 C -17.202187 144.934738 24.761213 73.618286 26.493158 72.615494 L 0.012685 57.151917 L 86.588356 44.731384 L 114.762726 126.177933 L 84.234138 107.889526 C 83.551903 109.13237 61.809147 145.756607 84.86174 186.718735 C 99.980049 213.580933 127.962624 222.31279 128.784515 222.587738 L 99.629242 256.218384 L 127.642403 291.815674 Z"/>
</g>
</g>
</svg>

Before

Width:  |  Height:  |  Size: 4.3 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.1 MiB

View file

@ -1,395 +0,0 @@
<!DOCTYPE html>
<html class="client-nojs" lang="en" dir="ltr">
<head>
<meta charset="UTF-8"/>
<title>File:Characteristics of Capability Maturity Model.svg - Wikipedia</title>
<script>document.documentElement.className="client-js";RLCONF={"wgBreakFrames":false,"wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat":"dmy","wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgRequestId":"15973eb8-07fd-460b-9001-7edd0829d412","wgCSPNonce":false,"wgCanonicalNamespace":"File","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":6,"wgPageName":"File:Characteristics_of_Capability_Maturity_Model.svg","wgTitle":"Characteristics of Capability Maturity Model.svg","wgCurRevisionId":0,"wgRevisionId":0,"wgArticleId":0,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":[],"wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgRelevantPageName":"File:Characteristics_of_Capability_Maturity_Model.svg","wgRelevantArticleId":0,"wgIsProbablyEditable":false,"wgRelevantPageIsProbablyEditable":false,
"wgRestrictionCreate":[],"wgRestrictionUpload":[],"wgFlaggedRevsParams":{"tags":{"status":{"levels":-1}}},"wgMediaViewerOnClick":true,"wgMediaViewerEnabledByDefault":true,"wgPopupsFlags":10,"wgVisualEditor":{"pageLanguageCode":"en","pageLanguageDir":"ltr","pageVariantFallbacks":"en"},"wgMFDisplayWikibaseDescriptions":{"search":true,"nearby":true,"watchlist":true,"tagline":false},"wgWMESchemaEditAttemptStepOversample":false,"wgWMEPageLength":0,"wgNoticeProject":"wikipedia","wgULSCurrentAutonym":"English","wgEditSubmitButtonLabelPublish":true,"wgCentralAuthMobileDomain":false,"wgULSPosition":"interlanguage","wgULSisCompactLinksEnabled":true,"wgGENewcomerTasksGuidanceEnabled":true,"wgGEAskQuestionEnabled":false,"wgGELinkRecommendationsFrontendEnabled":false};RLSTATE={"ext.globalCssJs.user.styles":"ready","site.styles":"ready","user.styles":"ready","ext.globalCssJs.user":"ready","user":"ready","user.options":"loading","filepage":"ready","mediawiki.action.view.filepage":"ready",
"skins.vector.styles.legacy":"ready","ext.visualEditor.desktopArticleTarget.noscript":"ready","ext.wikimediaBadges":"ready","ext.uls.interlanguage":"ready"};RLPAGEMODULES=["mediawiki.action.view.metadata","site","mediawiki.page.ready","skins.vector.legacy.js","ext.gadget.ReferenceTooltips","ext.gadget.charinsert","ext.gadget.extra-toolbar-buttons","ext.gadget.refToolbar","ext.gadget.switcher","mmv.head","mmv.bootstrap.autostart","ext.popups","ext.visualEditor.desktopArticleTarget.init","ext.visualEditor.targetLoader","ext.eventLogging","ext.wikimediaEvents","ext.navigationTiming","ext.cx.eventlogging.campaigns","ext.centralNotice.geoIP","ext.centralNotice.startUp","ext.centralauth.centralautologin","ext.uls.compactlinks","ext.uls.interface"];</script>
<script>(RLQ=window.RLQ||[]).push(function(){mw.loader.implement("user.options@1hzgi",function($,jQuery,require,module){/*@nomin*/mw.user.tokens.set({"patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"});
});});</script>
<link rel="stylesheet" href="/w/load.php?lang=en&amp;modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cfilepage%7Cmediawiki.action.view.filepage%7Cskins.vector.styles.legacy&amp;only=styles&amp;skin=vector"/>
<script async="" src="/w/load.php?lang=en&amp;modules=startup&amp;only=scripts&amp;raw=1&amp;skin=vector"></script>
<link rel="stylesheet" href="https://commons.wikimedia.org/w/index.php?title=MediaWiki:Filepage.css&amp;action=raw&amp;ctype=text/css"/>
<meta name="ResourceLoaderDynamicStyles" content=""/>
<link rel="stylesheet" href="/w/load.php?lang=en&amp;modules=site.styles&amp;only=styles&amp;skin=vector"/>
<meta name="generator" content="MediaWiki 1.38.0-wmf.9"/>
<meta name="referrer" content="origin"/>
<meta name="referrer" content="origin-when-crossorigin"/>
<meta name="referrer" content="origin-when-cross-origin"/>
<meta name="format-detection" content="telephone=no"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1200px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="1200"/>
<meta property="og:image:height" content="900"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="800"/>
<meta property="og:image:height" content="600"/>
<meta property="og:image" content="https://upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/640px-Characteristics_of_Capability_Maturity_Model.svg.png"/>
<meta property="og:image:width" content="640"/>
<meta property="og:image:height" content="480"/>
<meta property="og:title" content="File:Characteristics of Capability Maturity Model.svg - Wikipedia"/>
<meta property="og:type" content="website"/>
<link rel="preconnect" href="//upload.wikimedia.org"/>
<link rel="preconnect" href="//upload.wikimedia.org"/>
<link rel="alternate" media="only screen and (max-width: 720px)" href="//en.m.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"/>
<link rel="apple-touch-icon" href="/static/apple-touch/wikipedia.png"/>
<link rel="shortcut icon" href="/static/favicon/wikipedia.ico"/>
<link rel="search" type="application/opensearchdescription+xml" href="/w/opensearch_desc.php" title="Wikipedia (en)"/>
<link rel="EditURI" type="application/rsd+xml" href="//en.wikipedia.org/w/api.php?action=rsd"/>
<link rel="license" href="https://creativecommons.org/licenses/by-sa/3.0/"/>
<link rel="canonical" href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"/>
<link rel="dns-prefetch" href="//meta.wikimedia.org" />
<link rel="dns-prefetch" href="//login.wikimedia.org"/>
</head>
<body class="mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-6 ns-subject page-File_Characteristics_of_Capability_Maturity_Model_svg rootpage-File_Characteristics_of_Capability_Maturity_Model_svg skin-vector action-view skin-vector-legacy"><div id="mw-page-base" class="noprint"></div>
<div id="mw-head-base" class="noprint"></div>
<div id="content" class="mw-body" role="main">
<a id="top"></a>
<div id="siteNotice"><!-- CentralNotice --></div>
<div class="mw-indicators">
<div id="mw-indicator-commons-icon" class="mw-indicator"><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" title="This is a file from the Wikimedia Commons"><img alt="This is a file from the Wikimedia Commons" src="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/15px-Commons-logo.svg.png" decoding="async" width="15" height="20" srcset="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/22px-Commons-logo.svg.png 1.5x, //upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png 2x" data-file-width="1024" data-file-height="1376" /></a></div>
</div>
<h1 id="firstHeading" class="firstHeading" >File:Characteristics of Capability Maturity Model.svg</h1>
<div id="bodyContent" class="vector-body">
<div id="siteSub" class="noprint">From Wikipedia, the free encyclopedia</div>
<div id="contentSub"></div>
<div id="contentSub2"></div>
<div id="jump-to-nav"></div>
<a class="mw-jump-link" href="#mw-head">Jump to navigation</a>
<a class="mw-jump-link" href="#searchInput">Jump to search</a>
<div id="mw-content-text" class="mw-body-content"><ul id="filetoc"><li><a href="#file">File</a></li>
<li><a href="#filehistory">File history</a></li>
<li><a href="#filelinks">File usage</a></li>
<li><a href="#globalusage">Global file usage</a></li>
<li><a href="#metadata">Metadata</a></li></ul><div class="fullImageLink" id="file"><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg"><img alt="File:Characteristics of Capability Maturity Model.svg" src="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="800" height="600" srcset="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1200px-Characteristics_of_Capability_Maturity_Model.svg.png 1.5x, //upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1600px-Characteristics_of_Capability_Maturity_Model.svg.png 2x" data-file-width="800" data-file-height="600" /></a><div class="mw-filepage-resolutioninfo">Size of this PNG preview of this SVG file: <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/800px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">800 × 600 pixels</a>. <span class="mw-filepage-other-resolutions">Other resolutions: <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/320px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">320 × 240 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/640px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">640 × 480 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1024px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">1,024 × 768 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/1280px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">1,280 × 960 pixels</a> | <a href="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/2560px-Characteristics_of_Capability_Maturity_Model.svg.png" class="mw-thumbnail-link">2,560 × 1,920 pixels</a>.</span></div></div>
<div class="fullMedia"><p><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg" class="internal" title="Characteristics of Capability Maturity Model.svg">Original file</a> &#8206;<span class="fileInfo">(SVG file, nominally 800 × 600 pixels, file size: 15 KB)</span>
</p></div><div class="sharedUploadNotice">
<table id="mw-sharedupload" class="plainlinks fmbox fmbox-system" role="presentation"><tbody><tr><td class="mbox-image"><img alt="" src="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png" decoding="async" title="Wikimedia Commons logo" width="30" height="40" class="noviewer" srcset="//upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/45px-Commons-logo.svg.png 1.5x, //upload.wikimedia.org/wikipedia/en/thumb/4/4a/Commons-logo.svg/59px-Commons-logo.svg.png 2x" data-file-width="1024" data-file-height="1376" /></td><td class="mbox-text" style="text-align: center;">This is a file from the <a href="https://commons.wikimedia.org/wiki/Main_Page" class="extiw" title="commons:Main Page">Wikimedia Commons</a>. Information from its <b><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" class="extiw" title="commons:File:Characteristics of Capability Maturity Model.svg">description page there</a></b> is shown below.<br /><span style="font-size: smaller;">Commons is a freely licensed media file repository. <a href="https://commons.wikimedia.org/wiki/Commons:Welcome" class="extiw" title="commons:Commons:Welcome">You can help</a>.</span></td></tr></tbody></table>
</div>
<div id="shared-image-desc"><div class="mw-parser-output"><div class="hproduct commons-file-information-table">
<table class="fileinfotpl-type-information toccolours vevent mw-content-ltr" style="width: 100%; direction: ltr;" cellpadding="4"><tbody><tr style="vertical-align: top"><td id="fileinfotpl_desc" class="fileinfo-paramfield" lang="en">Description<span class="summary fn" style="display:none">Characteristics of Capability Maturity Model.svg</span></td>
<td class="description">
<div class="description mw-content-ltr en" dir="ltr" lang="en"><span class="language en" title="English"><b>English: </b></span> The five process maturity levels in the Capability Maturity Model.</div></td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_date" class="fileinfo-paramfield" lang="en">Date</td>
<td lang="en">
Retrieved 8 dec 2008</td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_src" class="fileinfo-paramfield" lang="en">Source</td>
<td>
<a rel="nofollow" class="external text" href="http://software.gsfc.nasa.gov/docs/What%20is%20CMMI.ppt">What is CMMI ?</a></td>
</tr><tr style="vertical-align: top"><td id="fileinfotpl_aut" class="fileinfo-paramfield" lang="en">Author</td>
<td>
Sally Godfrey</td>
</tr></tbody></table></div>
<h2><span class="mw-headline" id="Licensing">Licensing</span></h2>
<table class="licensetpl" style="display:none"><tbody><tr><td><span class="licensetpl_short">Public domain</span><span class="licensetpl_long">Public domain</span><span class="licensetpl_link_req">false</span><span class="licensetpl_attr_req">false</span>
</td></tr></tbody></table><table style="width:100%; clear:both; margin:0.5em auto; background-color:#f7f8ff; border:2px solid #8888aa; direction: ltr; border-spacing: 8px; padding: 0px;" class="layouttemplate mw-content-ltr" lang="en"><tbody><tr><td><img alt="Public domain" src="https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/64px-PD-icon.svg.png" decoding="async" title="Public domain" width="64" height="64" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/96px-PD-icon.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/6/62/PD-icon.svg/128px-PD-icon.svg.png 2x" data-file-width="196" data-file-height="196"></td>
<td><i>This file is in the <b><a href="https://en.wikipedia.org/wiki/public_domain" class="extiw" title="w:public domain">public domain</a></b> in the United States because it was solely created by <a href="https://en.wikipedia.org/wiki/NASA" class="extiw" title="w:NASA">NASA</a>. NASA copyright policy states that "NASA material is not protected by copyright <b>unless noted</b>". (See <a href="//commons.wikimedia.org/wiki/Template:PD-USGov" title="Template:PD-USGov">Template:PD-USGov</a>, <a rel="nofollow" class="external text" href="https://www.nasa.gov/multimedia/guidelines/index.html">NASA copyright policy page</a> or <a rel="nofollow" class="external text" href="https://www.jpl.nasa.gov/imagepolicy/">JPL Image Use Policy</a>.)</i>
</td>
<td><div class="floatright"><img alt="NASA logo.svg" src="https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/64px-NASA_logo.svg.png" decoding="async" width="64" height="54" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/96px-NASA_logo.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/e/e5/NASA_logo.svg/128px-NASA_logo.svg.png 2x" data-file-width="110" data-file-height="92"></div>
</td></tr><tr><td><div class="floatleft"><img alt="Dialog-warning.svg" src="https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/50px-Dialog-warning.svg.png" decoding="async" width="50" height="50" srcset="https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/75px-Dialog-warning.svg.png 1.5x, https://upload.wikimedia.org/wikipedia/commons/thumb/6/6e/Dialog-warning.svg/100px-Dialog-warning.svg.png 2x" data-file-width="48" data-file-height="48"></div>
</td>
<td><small><b>Warnings:</b><br>* Use of <a href="https://en.wikipedia.org/wiki/NASA_logo" class="extiw" title="w:NASA logo">NASA logos</a>, insignia and emblems is restricted per U.S. law <a rel="nofollow" class="external text" href="https://www.govinfo.gov/app/details/CFR-2021-title14-vol5/CFR-2021-title14-vol5-part1221/summary">14 CFR 1221</a>.
</small><ul><small><li>The NASA website hosts a large number of images from the <a href="https://en.wikipedia.org/wiki/Soviet_space_program" class="extiw" title="w:Soviet space program">Soviet</a>/<a href="https://en.wikipedia.org/wiki/Russian_Federal_Space_Agency" class="extiw" title="w:Russian Federal Space Agency">Russian space agency</a>, and other non-American space agencies. These are <i>not necessarily</i> in the public domain.</li>
<li>Materials based on <a href="https://en.wikipedia.org/wiki/Hubble_Space_Telescope" class="extiw" title="w:Hubble Space Telescope">Hubble Space Telescope</a> data may be copyrighted if they are not explicitly produced by the <a href="https://en.wikipedia.org/wiki/Space_Telescope_Science_Institute" class="extiw" title="w:Space Telescope Science Institute">STScI</a>.<a rel="nofollow" class="external autonumber" href="http://hubblesite.org/copyright/">[1]</a> See also <a href="//commons.wikimedia.org/wiki/Template:PD-Hubble" title="Template:PD-Hubble"><span style="font-family:monospace,monospace;">{{PD-Hubble}}</span></a> and <a href="//commons.wikimedia.org/wiki/Template:Cc-Hubble" class="mw-redirect" title="Template:Cc-Hubble"><span style="font-family:monospace,monospace;">{{Cc-Hubble}}</span></a>.</li>
<li>The <a href="https://en.wikipedia.org/wiki/Solar_and_Heliospheric_Observatory" class="extiw" title="w:Solar and Heliospheric Observatory">SOHO (ESA &amp; NASA)</a> joint project implies that all materials created by its probe are copyrighted and require permission for commercial non-educational use. <a rel="nofollow" class="external autonumber" href="https://sohowww.nascom.nasa.gov/data/summary/copyright.html">[2]</a></li>
<li>Images featured on the <i><a href="https://en.wikipedia.org/wiki/Astronomy_Picture_of_the_Day" class="extiw" title="w:Astronomy Picture of the Day">Astronomy Picture of the Day</a></i> (APOD) web site may be copyrighted. <a rel="nofollow" class="external autonumber" href="https://apod.nasa.gov/apod/lib/about_apod.html#srapply">[3]</a></li>
</small><li><small>The <a href="https://en.wikipedia.org/wiki/National_Space_Science_Data_Center" class="extiw" title="w:National Space Science Data Center">National Space Science Data Center</a> (NSSDC) site has been known to host <a href="//commons.wikimedia.org/wiki/Commons:Village_pump/Copyright/Archive/2014/08#Copyright_status_of_File:Venera_13_-_ven13right.png" title="Commons:Village pump/Copyright/Archive/2014/08">copyrighted content</a>. Its <a rel="nofollow" class="external text" href="https://nssdc.gsfc.nasa.gov/photo_gallery/photogallery-faq.html#use">photo gallery FAQ</a> states that all of the images in the photo gallery are in the public domain "Unless otherwise noted."</small></li></ul></td></tr></tbody></table><h2><span class="mw-headline" id="Original_upload_log">Original upload log</span></h2><p>
Transferred from <span class="plainlinks"><a class="external text" href="https://en.wikipedia.org">en.wikipedia</a></span> to Commons by <a href="//commons.wikimedia.org/w/index.php?title=User:FSII&amp;action=edit&amp;redlink=1" class="new" title="User:FSII (page does not exist)">FSII</a> using <a href="https://iw.toolforge.org/commonshelper/" class="extiw" title="toollabs:commonshelper/">CommonsHelper</a>. </p><div lang="en" dir="ltr" class="description en" style="display:inline;">The original description page was <a class="external text" href="https://en.wikipedia.org/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg">here</a>. All following user names refer to en.wikipedia.</div>
<ul><li>2011-05-04 11:23 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (15180 bytes) <i>fixed chacterized -&gt; characterized</i></li>
<li>2009-12-27 08:44 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (15143 bytes) <i>Bolt titles</i></li>
<li>2009-12-26 12:01 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (14420 bytes) <i></i></li>
<li>2009-12-26 11:59 <a href="https://en.wikipedia.org/wiki/User:Conan" class="extiw" title="en:User:Conan">Conan</a> 800×600× (17026 bytes) <i>SVG version of http://en.wikipedia.org/wiki/File:Characteristics_of_the_Maturity_levels.jpg which is snapshot from http://software.gsfc.nasa.gov/docs/What%20is%20CMMI.ppt </i></li></ul><!--
NewPP limit report
Parsed by mw1376
Cached time: 20211209182319
Cache expiry: 1814400
Reduced expiry: false
Complications: []
CPU time usage: 0.178 seconds
Real time usage: 0.232 seconds
Preprocessor visited node count: 1006/1000000
Postexpand include size: 19999/2097152 bytes
Template argument size: 3322/2097152 bytes
Highest expansion depth: 14/40
Expensive parser function count: 3/500
Unstrip recursion depth: 0/20
Unstrip postexpand size: 219/5000000 bytes
Lua time usage: 0.068/10.000 seconds
Lua memory usage: 853854/52428800 bytes
Number of Wikibase entities loaded: 1/400
--><!--
Transclusion expansion time report (%,ms,calls,template)
100.00% 181.340 1 -total
43.21% 78.349 1 Template:Information
42.27% 76.660 3 Template:Autotranslate
25.41% 46.073 1 Template:PD-USGov-NASA
14.62% 26.514 1 Template:Transferred_from
14.51% 26.320 1 Template:PD-USGov-NASA/layout
14.11% 25.588 1 Template:Original_description_page
7.16% 12.983 1 Template:En
6.60% 11.960 2 Template:Tl
5.16% 9.357 2 Template:T/main
--><!-- Saved in parser cache with key commonswiki:pcache:idhash:16790845-0!canonical and timestamp 20211209182319 and revision id 170613065. Serialized with JSON.
--></div></div>
<h2 id="filehistory">File history</h2>
<div id="mw-imagepage-section-filehistory">
<p>Click on a date/time to view the file as it appeared at that time.
</p>
<table class="wikitable filehistory">
<tr><th></th><th>Date/Time</th><th>Thumbnail</th><th>Dimensions</th><th>User</th><th>Comment</th></tr>
<tr><td>current</td><td class='filehistory-selected' style='white-space: nowrap;'><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg">01:58, 13 October 2011</a></td><td><a href="//upload.wikimedia.org/wikipedia/commons/e/ec/Characteristics_of_Capability_Maturity_Model.svg"><img alt="Thumbnail for version as of 01:58, 13 October 2011" src="//upload.wikimedia.org/wikipedia/commons/thumb/e/ec/Characteristics_of_Capability_Maturity_Model.svg/120px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="120" height="90" data-file-width="800" data-file-height="600" /></a></td><td>800 × 600 <span style="white-space: nowrap;">(15 KB)</span></td><td>Three d dave</td><td dir="ltr">Corrects spelling and pluralization; also nudges labels to a more uniform spacing.</td></tr>
<tr><td></td><td style='white-space: nowrap;'><a href="//upload.wikimedia.org/wikipedia/commons/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg">10:18, 30 September 2011</a></td><td><a href="//upload.wikimedia.org/wikipedia/commons/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg"><img alt="Thumbnail for version as of 10:18, 30 September 2011" src="//upload.wikimedia.org/wikipedia/commons/thumb/archive/e/ec/20111013015829%21Characteristics_of_Capability_Maturity_Model.svg/120px-Characteristics_of_Capability_Maturity_Model.svg.png" decoding="async" width="120" height="90" data-file-width="800" data-file-height="600" /></a></td><td>800 × 600 <span style="white-space: nowrap;">(15 KB)</span></td><td>File Upload Bot (Magnus Manske)</td><td dir="ltr"> {{BotMoveToCommons|en.wikipedia|year={{subst:CURRENTYEAR}}|month={{subst:CURRENTMONTHNAME}}|day={{subst:CURRENTDAY}}}} {{Information |Description={{en|&#039;&#039;no original description&#039;&#039;}} |Source=Transferred from [http://en.wikipedia.org en.wikipedia]; transfer</td></tr>
</table>
</div>
<h2 id="filelinks">File usage</h2>
<div id='mw-imagepage-section-linkstoimage'>
<div class="linkstoimage" id="linkstoimage">The following pages on the English Wikipedia use this file (pages on other projects are not listed):</div><ul class="mw-imagepage-linkstoimage">
<li class="mw-imagepage-linkstoimage-ns0"><a href="/wiki/Capability_Maturity_Model_Integration" title="Capability Maturity Model Integration">Capability Maturity Model Integration</a></li>
</ul>
</div>
<h2 id="globalusage">Global file usage</h2>
<div id="mw-imagepage-section-globalusage"><p>The following other wikis use this file:
</p><ul>
<li class='mw-gu-onwiki-ar_wikipedia_org'>Usage on ar.wikipedia.org
<ul> <li><a class="external" href="https://ar.wikipedia.org/wiki/%D8%AA%D9%83%D8%A7%D9%85%D9%84_%D9%86%D9%85%D9%88%D8%B0%D8%AC_%D9%86%D8%B6%D9%88%D8%AC_%D8%A7%D9%84%D9%85%D9%82%D8%AF%D8%B1%D8%A9">تكامل نموذج نضوج المقدرة</a></li>
</ul></li>
<li class='mw-gu-onwiki-da_wikipedia_org'>Usage on da.wikipedia.org
<ul> <li><a class="external" href="https://da.wikipedia.org/wiki/Capability_Maturity_Model">Capability Maturity Model</a></li>
</ul></li>
<li class='mw-gu-onwiki-de_wikipedia_org'>Usage on de.wikipedia.org
<ul> <li><a class="external" href="https://de.wikipedia.org/wiki/Capability_Maturity_Model">Capability Maturity Model</a></li>
<li><a class="external" href="https://de.wikipedia.org/wiki/Capability_Maturity_Model_Integration">Capability Maturity Model Integration</a></li>
</ul></li>
<li class='mw-gu-onwiki-fa_wikipedia_org'>Usage on fa.wikipedia.org
<ul> <li><a class="external" href="https://fa.wikipedia.org/wiki/%D9%85%D8%AF%D9%84_%D8%A8%D9%84%D9%88%D8%BA_%D9%82%D8%A7%D8%A8%D9%84%DB%8C%D8%AA_%DB%8C%DA%A9%D9%BE%D8%A7%D8%B1%DA%86%D9%87">مدل بلوغ قابلیت یکپارچه</a></li>
</ul></li>
<li class='mw-gu-onwiki-meta_wikimedia_org'>Usage on meta.wikimedia.org
<ul> <li><a class="external" href="https://meta.wikimedia.org/wiki/Talk:Strategy/Wikimedia_movement/2018-20/Recommendations/Iteration_1/Diversity/2">Talk:Strategy/Wikimedia movement/2018-20/Recommendations/Iteration 1/Diversity/2</a></li>
</ul></li>
<li class='mw-gu-onwiki-ru_wikipedia_org'>Usage on ru.wikipedia.org
<ul> <li><a class="external" href="https://ru.wikipedia.org/wiki/%D0%A3%D1%80%D0%BE%D0%B2%D0%BD%D0%B8_%D0%B7%D1%80%D0%B5%D0%BB%D0%BE%D1%81%D1%82%D0%B8_%D1%83%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F">Уровни зрелости управления</a></li>
</ul></li>
<li class='mw-gu-onwiki-sv_wikipedia_org'>Usage on sv.wikipedia.org
<ul> <li><a class="external" href="https://sv.wikipedia.org/wiki/Wikipedia:Bybrunnen/Arkiv_2018-10">Wikipedia:Bybrunnen/Arkiv 2018-10</a></li>
</ul></li>
<li class='mw-gu-onwiki-www_wikidata_org'>Usage on www.wikidata.org
<ul> <li><a class="external" href="https://www.wikidata.org/wiki/Property_talk:P5587">Property talk:P5587</a></li>
<li><a class="external" href="https://www.wikidata.org/wiki/User:Salgo60/ExternalIdentifiers">User:Salgo60/ExternalIdentifiers</a></li>
</ul></li>
<li class='mw-gu-onwiki-zh_wikipedia_org'>Usage on zh.wikipedia.org
<ul> <li><a class="external" href="https://zh.wikipedia.org/wiki/%E8%83%BD%E5%8A%9B%E6%88%90%E7%86%9F%E5%BA%A6%E6%A8%A1%E5%9E%8B%E9%9B%86%E6%88%90">能力成熟度模型集成</a></li>
</ul></li>
</ul>
</div><h2 id="metadata">Metadata</h2>
<div class="mw-imagepage-section-metadata"><p>This file contains additional information, probably added from the digital camera or scanner used to create or digitize it.
</p><p>
If the file has been modified from its original state, some details may not fully reflect the modified file.</p><table id="mw_metadata" class="mw_metadata collapsed">
<tbody><tr class="exif-imagewidth mw-metadata-collapsible"><th>Width</th><td>800</td></tr><tr class="exif-imagelength mw-metadata-collapsible"><th>Height</th><td>600</td></tr></tbody></table>
</div><noscript><img src="//en.wikipedia.org/wiki/Special:CentralAutoLogin/start?type=1x1" alt="" title="" width="1" height="1" style="border: none; position: absolute;" /></noscript>
<div class="printfooter">Retrieved from "<a dir="ltr" href="https://en.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg">https://en.wikipedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg</a>"</div></div>
<div id="catlinks" class="catlinks catlinks-allhidden" data-mw="interface"></div>
</div>
</div>
<div id='mw-data-after-content'>
<div class="read-more-container"></div>
</div>
<div id="mw-navigation">
<h2>Navigation menu</h2>
<div id="mw-head">
<nav id="p-personal" class="mw-portlet mw-portlet-personal vector-user-menu-legacy vector-menu" aria-labelledby="p-personal-label" role="navigation"
>
<h3 id="p-personal-label" aria-label="" class="vector-menu-heading">
<span>Personal tools</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="pt-anonuserpage" class="mw-list-item"><span>Not logged in</span></li><li id="pt-anontalk" class="mw-list-item"><a href="/wiki/Special:MyTalk" title="Discussion about edits from this IP address [n]" accesskey="n"><span>Talk</span></a></li><li id="pt-anoncontribs" class="mw-list-item"><a href="/wiki/Special:MyContributions" title="A list of edits made from this IP address [y]" accesskey="y"><span>Contributions</span></a></li><li id="pt-createaccount" class="mw-list-item"><a href="/w/index.php?title=Special:CreateAccount&amp;returnto=File%3ACharacteristics+of+Capability+Maturity+Model.svg" title="You are encouraged to create an account and log in; however, it is not mandatory"><span>Create account</span></a></li><li id="pt-login" class="mw-list-item"><a href="/w/index.php?title=Special:UserLogin&amp;returnto=File%3ACharacteristics+of+Capability+Maturity+Model.svg" title="You&#039;re encouraged to log in; however, it&#039;s not mandatory. [o]" accesskey="o"><span>Log in</span></a></li></ul>
</div>
</nav>
<div id="left-navigation">
<nav id="p-namespaces" class="mw-portlet mw-portlet-namespaces vector-menu vector-menu-tabs" aria-labelledby="p-namespaces-label" role="navigation"
>
<h3 id="p-namespaces-label" aria-label="" class="vector-menu-heading">
<span>Namespaces</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="ca-nstab-image" class="selected mw-list-item"><a href="/wiki/File:Characteristics_of_Capability_Maturity_Model.svg" title="View the file page [c]" accesskey="c"><span>File</span></a></li><li id="ca-talk" class="new mw-list-item"><a href="/w/index.php?title=File_talk:Characteristics_of_Capability_Maturity_Model.svg&amp;action=edit&amp;redlink=1" rel="discussion" title="Discuss improvements to the content page (page does not exist) [t]" accesskey="t"><span>Talk</span></a></li></ul>
</div>
</nav>
<nav id="p-variants" class="mw-portlet mw-portlet-variants emptyPortlet vector-menu-dropdown-noicon vector-menu vector-menu-dropdown" aria-labelledby="p-variants-label" role="navigation"
>
<input type="checkbox"
id="p-variants-checkbox"
role="button"
aria-haspopup="true"
data-event-name="ui.dropdown-p-variants"
class="vector-menu-checkbox" aria-labelledby="p-variants-label" />
<h3 id="p-variants-label" aria-label="Change language variant" class="vector-menu-heading">
<span>Variants</span>
<span class="vector-menu-checkbox-expanded">expanded</span>
<span class="vector-menu-checkbox-collapsed">collapsed</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
</div>
</nav>
</div>
<div id="right-navigation">
<nav id="p-views" class="mw-portlet mw-portlet-views vector-menu vector-menu-tabs" aria-labelledby="p-views-label" role="navigation"
>
<h3 id="p-views-label" aria-label="" class="vector-menu-heading">
<span>Views</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="ca-view" class="selected mw-list-item"><a href="/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"><span>Read</span></a></li><li id="ca-view-foreign" class="mw-list-item"><a href="https://commons.wikimedia.org/wiki/File:Characteristics_of_Capability_Maturity_Model.svg"><span>View on Commons</span></a></li></ul>
</div>
</nav>
<nav id="p-cactions" class="mw-portlet mw-portlet-cactions emptyPortlet vector-menu-dropdown-noicon vector-menu vector-menu-dropdown" aria-labelledby="p-cactions-label" role="navigation" title="More options"
>
<input type="checkbox"
id="p-cactions-checkbox"
role="button"
aria-haspopup="true"
data-event-name="ui.dropdown-p-cactions"
class="vector-menu-checkbox" aria-labelledby="p-cactions-label" />
<h3 id="p-cactions-label" aria-label="" class="vector-menu-heading">
<span>More</span>
<span class="vector-menu-checkbox-expanded">expanded</span>
<span class="vector-menu-checkbox-collapsed">collapsed</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
</div>
</nav>
<div id="p-search" role="search" class=" vector-search-box">
<div>
<h3 >
<label for="searchInput">Search</label>
</h3>
<form action="/w/index.php" id="searchform"
class="vector-search-box-form">
<div id="simpleSearch"
class="vector-search-box-inner"
data-search-loc="header-navigation">
<input class="vector-search-box-input"
type="search" name="search" placeholder="Search Wikipedia" aria-label="Search Wikipedia" autocapitalize="sentences" title="Search Wikipedia [f]" accesskey="f" id="searchInput"
/>
<input type="hidden" name="title" value="Special:Search"/>
<input id="mw-searchButton"
class="searchButton mw-fallbackSearchButton" type="submit" name="fulltext" title="Search Wikipedia for this text" value="Search" />
<input id="searchButton"
class="searchButton" type="submit" name="go" title="Go to a page with this exact name if it exists" value="Go" />
</div>
</form>
</div>
</div>
</div>
</div>
<div id="mw-panel">
<div id="p-logo" role="banner">
<a class="mw-wiki-logo" href="/wiki/Main_Page"
title="Visit the main page"></a>
</div>
<nav id="p-navigation" class="mw-portlet mw-portlet-navigation vector-menu vector-menu-portal portal" aria-labelledby="p-navigation-label" role="navigation"
>
<h3 id="p-navigation-label" aria-label="" class="vector-menu-heading">
<span>Navigation</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="n-mainpage-description" class="mw-list-item"><a href="/wiki/Main_Page" title="Visit the main page [z]" accesskey="z"><span>Main page</span></a></li><li id="n-contents" class="mw-list-item"><a href="/wiki/Wikipedia:Contents" title="Guides to browsing Wikipedia"><span>Contents</span></a></li><li id="n-currentevents" class="mw-list-item"><a href="/wiki/Portal:Current_events" title="Articles related to current events"><span>Current events</span></a></li><li id="n-randompage" class="mw-list-item"><a href="/wiki/Special:Random" title="Visit a randomly selected article [x]" accesskey="x"><span>Random article</span></a></li><li id="n-aboutsite" class="mw-list-item"><a href="/wiki/Wikipedia:About" title="Learn about Wikipedia and how it works"><span>About Wikipedia</span></a></li><li id="n-contactpage" class="mw-list-item"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us" title="How to contact Wikipedia"><span>Contact us</span></a></li><li id="n-sitesupport" class="mw-list-item"><a href="https://donate.wikimedia.org/wiki/Special:FundraiserRedirector?utm_source=donate&amp;utm_medium=sidebar&amp;utm_campaign=C13_en.wikipedia.org&amp;uselang=en" title="Support us by donating to the Wikimedia Foundation"><span>Donate</span></a></li></ul>
</div>
</nav>
<nav id="p-interaction" class="mw-portlet mw-portlet-interaction vector-menu vector-menu-portal portal" aria-labelledby="p-interaction-label" role="navigation"
>
<h3 id="p-interaction-label" aria-label="" class="vector-menu-heading">
<span>Contribute</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="n-help" class="mw-list-item"><a href="/wiki/Help:Contents" title="Guidance on how to use and edit Wikipedia"><span>Help</span></a></li><li id="n-introduction" class="mw-list-item"><a href="/wiki/Help:Introduction" title="Learn how to edit Wikipedia"><span>Learn to edit</span></a></li><li id="n-portal" class="mw-list-item"><a href="/wiki/Wikipedia:Community_portal" title="The hub for editors"><span>Community portal</span></a></li><li id="n-recentchanges" class="mw-list-item"><a href="/wiki/Special:RecentChanges" title="A list of recent changes to Wikipedia [r]" accesskey="r"><span>Recent changes</span></a></li><li id="n-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_Upload_Wizard" title="Add images or other media for use on Wikipedia"><span>Upload file</span></a></li></ul>
</div>
</nav>
<nav id="p-tb" class="mw-portlet mw-portlet-tb vector-menu vector-menu-portal portal" aria-labelledby="p-tb-label" role="navigation"
>
<h3 id="p-tb-label" aria-label="" class="vector-menu-heading">
<span>Tools</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"><li id="t-whatlinkshere" class="mw-list-item"><a href="/wiki/Special:WhatLinksHere/File:Characteristics_of_Capability_Maturity_Model.svg" title="List of all English Wikipedia pages containing links to this page [j]" accesskey="j"><span>What links here</span></a></li><li id="t-upload" class="mw-list-item"><a href="/wiki/Wikipedia:File_Upload_Wizard" title="Upload files [u]" accesskey="u"><span>Upload file</span></a></li><li id="t-specialpages" class="mw-list-item"><a href="/wiki/Special:SpecialPages" title="A list of all special pages [q]" accesskey="q"><span>Special pages</span></a></li><li id="t-print" class="mw-list-item"><a href="javascript:print();" rel="alternate" title="Printable version of this page [p]" accesskey="p"><span>Printable version</span></a></li><li id="t-info" class="mw-list-item"><a href="/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg&amp;action=info" title="More information about this page"><span>Page information</span></a></li></ul>
</div>
</nav>
<nav id="p-lang" class="mw-portlet mw-portlet-lang vector-menu vector-menu-portal portal" aria-labelledby="p-lang-label" role="navigation"
>
<h3 id="p-lang-label" aria-label="" class="vector-menu-heading">
<span>Languages</span>
</h3>
<div class="vector-menu-content">
<ul class="vector-menu-content-list"></ul>
<div class="after-portlet after-portlet-lang"><span class="uls-after-portlet-link"></span></div>
</div>
</nav>
</div>
</div>
<footer id="footer" class="mw-footer" role="contentinfo" >
<ul id="footer-info">
</ul>
<ul id="footer-places">
<li id="footer-places-privacy"><a href="https://foundation.wikimedia.org/wiki/Privacy_policy" class="extiw" title="wmf:Privacy policy">Privacy policy</a></li>
<li id="footer-places-about"><a href="/wiki/Wikipedia:About" title="Wikipedia:About">About Wikipedia</a></li>
<li id="footer-places-disclaimer"><a href="/wiki/Wikipedia:General_disclaimer" title="Wikipedia:General disclaimer">Disclaimers</a></li>
<li id="footer-places-contact"><a href="//en.wikipedia.org/wiki/Wikipedia:Contact_us">Contact Wikipedia</a></li>
<li id="footer-places-mobileview"><a href="//en.m.wikipedia.org/w/index.php?title=File:Characteristics_of_Capability_Maturity_Model.svg&amp;mobileaction=toggle_view_mobile" class="noprint stopMobileRedirectToggle">Mobile view</a></li>
<li id="footer-places-developers"><a href="https://www.mediawiki.org/wiki/Special:MyLanguage/How_to_contribute">Developers</a></li>
<li id="footer-places-statslink"><a href="https://stats.wikimedia.org/#/en.wikipedia.org">Statistics</a></li>
<li id="footer-places-cookiestatement"><a href="https://foundation.wikimedia.org/wiki/Cookie_statement">Cookie statement</a></li>
</ul>
<ul id="footer-icons" class="noprint">
<li id="footer-copyrightico"><a href="https://wikimediafoundation.org/"><img src="/static/images/footer/wikimedia-button.png" srcset="/static/images/footer/wikimedia-button-1.5x.png 1.5x, /static/images/footer/wikimedia-button-2x.png 2x" width="88" height="31" alt="Wikimedia Foundation" loading="lazy" /></a></li>
<li id="footer-poweredbyico"><a href="https://www.mediawiki.org/"><img src="/static/images/footer/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki" srcset="/static/images/footer/poweredby_mediawiki_132x47.png 1.5x, /static/images/footer/poweredby_mediawiki_176x62.png 2x" width="88" height="31" loading="lazy"/></a></li>
</ul>
</footer>
<script>(RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgPageParseReport":{"limitreport":{"cputime":"0.001","walltime":"0.001","ppvisitednodes":{"value":2,"limit":1000000},"postexpandincludesize":{"value":0,"limit":2097152},"templateargumentsize":{"value":0,"limit":2097152},"expansiondepth":{"value":1,"limit":40},"expensivefunctioncount":{"value":0,"limit":500},"unstrip-depth":{"value":0,"limit":20},"unstrip-size":{"value":0,"limit":5000000},"entityaccesscount":{"value":0,"limit":400},"timingprofile":["100.00% 0.000 1 -total"]},"cachereport":{"origin":"mw1435","timestamp":"20211213104815","ttl":1814400,"transientcontent":false}}});mw.config.set({"wgBackendResponseTime":246,"wgHostname":"mw1435"});});</script>
</body>
</html>

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.9 MiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 3.5 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 38 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 28 KiB

View file

@ -1,6 +1,6 @@
# Using AI for Threat Modeling # Using AI for Threat Modeling
[Create a threat analysis chatbot](../../Various/Create%20a%20threat%20analysis%20chatbot.md) [Create a threat analysis chatbot](../Various/Create%20a%20threat%20analysis%20chatbot.md)
[PLOT4AI](https://plot4.ai) (Privacy Library Of Threats 4 Artificial Intelligence): A threat modeling library to help you build responsible AI [PLOT4AI](https://plot4.ai) (Privacy Library Of Threats 4 Artificial Intelligence): A threat modeling library to help you build responsible AI

View file

@ -1,11 +1,11 @@
See also: See also:
- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md) - [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
- [Identity and Access Management (IAM)](../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md) - [Identity and Access Management (IAM)](../Information%20Security/Identity%20and%20Access%20Management%20(IAM).md)
- [RBAC Access levels](../../Literature%20notes/RBAC%20Access%20levels.md) - [RBAC Access levels](RBAC%20Access%20levels.md)
- [CRUD Matrices](../Information%20Security/CRUD%20Matrices.md) - [CRUD Matrices](../Information%20Security/CRUD%20Matrices.md)
Source: [](../../Attachments/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf) Source: [](../Information%20Security/Certified%20Ethical%20Hacker%20Exam%20Guide%202021.pdf)
- Mandatory Access Control (MAC): - Mandatory Access Control (MAC):
- Every object gets a label - Every object gets a label

View file

@ -0,0 +1,13 @@
# Access Control
While [authorization](../Standards/ISO27x/Authorization.md) is primarily concerned with establishing the policies and rules that dictate access (i.e. *what* a person or system is allowed to do), **access control** is the _system_ or _process_ that enforces those defined permissions.
See:
- [Gedachten over rechtenstructuren](../Information%20Security/Gedachten%20over%20rechtenstructuren.md)
- [Authorization vs Access Control](Authorization%20vs%20Access%20Control.md)
- [Access Control Models](Access%20Control%20Models.md)
- [ISO 27001 A 9 Access control](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%209%20Access%20control.md)
- [a-5.15-Access-control](../Standards/ISO27x/OST/27002/EN/a-5.15-Access-control.md)

View file

@ -1,3 +1,5 @@
# Asset Types in NIST
Asked ChatGPT on 3 april 2024 Asked ChatGPT on 3 april 2024
The National Institute of Standards and Technology (NIST) defines several categories or types of assets under its guidelines for managing and protecting information systems. They include: The National Institute of Standards and Technology (NIST) defines several categories or types of assets under its guidelines for managing and protecting information systems. They include:

View file

Before

Width:  |  Height:  |  Size: 96 KiB

After

Width:  |  Height:  |  Size: 96 KiB

Before After
Before After

View file

@ -1,7 +1,4 @@
--- # Asset lifecycle
aliases:
- Secure data lifecyle
---
## Asset mgt implementation ## Asset mgt implementation
Source: Defensive Security Handbook: Best Practices for Securing Infrastructure by Lee Brotherston, Amanda Berlin Source: Defensive Security Handbook: Best Practices for Securing Infrastructure by Lee Brotherston, Amanda Berlin
@ -16,7 +13,7 @@ Each department or person involved in each step should understand when and how a
Track changes, monitor and report Track changes, monitor and report
![](secure_data_lifecycle.jpeg) ![](../Various/Business%20processes/secure_data_lifecycle.jpeg)

View file

@ -60,7 +60,7 @@ ISO 27001 explicitly requires asset ownership in two controls:
When asset or process ownership is unclear, it can be determined by mapping the situation to one of four scenarios: When asset or process ownership is unclear, it can be determined by mapping the situation to one of four scenarios:
![](../rumc-eigenaarschap.png) ![](rumc-eigenaarschap.png)
@ -91,12 +91,12 @@ First, determine whether the asset/process is actually needed. The three institu
The source files reference the following related notes in the vault: The source files reference the following related notes in the vault:
- [Vulnerability 1](../Vulnerability%201.md) - [Vulnerability](../Information%20Security/Risks/Vulnerability.md)
- [Threat](../../Literature%20notes/Threat.md) - [Threats MoC](../Information%20Security/Risks/Threats%20MoC.md)
- [Risks](../Risks.md) - [Risks definitions](../Information%20Security/Risks/Risks%20definitions.md)
- [Risk ownership](../Risk%20ownership.md) - [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md)
- [Control ownership](Control%20ownership.md) - [Control ownership](Control%20ownership.md)
- [Asset lifecycle](../../Literature%20notes/Asset%20lifecycle.md) - [Asset lifecycle](Asset%20lifecycle.md)
- [How to develop an Asset Inventory](How%20to%20develop%20an%20Asset%20Inventory.md) - [How to develop an Asset Inventory](How%20to%20develop%20an%20Asset%20Inventory.md)

View file

@ -6,7 +6,7 @@ tags:
# Authorization vs. Access Control # Authorization vs. Access Control
[Authorization](../../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions. [Authorization](../Standards/ISO27x/Authorization.md) defines _what_ a user (or system) is allowed to do, [access control ](Access%20Control.md) is the _system_ or _process_ that enforces those defined permissions.
## Authorization ## Authorization
@ -23,8 +23,8 @@ tags:
- **What it is:** Access control is the **mechanism or system that enforces the authorization policies**. It's the technical implementation that actually grants or denies access to a resource based on the authorized permissions. - **What it is:** Access control is the **mechanism or system that enforces the authorization policies**. It's the technical implementation that actually grants or denies access to a resource based on the authorized permissions.
- **The "How":** It answers the question, "How is the 'what' actually applied and managed?" - **The "How":** It answers the question, "How is the 'what' actually applied and managed?"
- **Enforcement:** Access control is the act of putting those policies into practice. It involves: - **Enforcement:** Access control is the act of putting those policies into practice. It involves:
- Checking a user's identity ([Authentication](../../Standards/ISO27x/Authentication.md)). - Checking a user's identity ([Authentication](../Standards/ISO27x/Authentication.md)).
- Consulting the pre-defined [Authorization](../../Standards/ISO27x/Authorization.md)authorization rules. - Consulting the pre-defined [Authorization](../Standards/ISO27x/Authorization.md)authorization rules.
- Granting or denying access to specific resources (files, applications, data, network segments, physical locations, etc.) or actions (read, write, delete, execute). - Granting or denying access to specific resources (files, applications, data, network segments, physical locations, etc.) or actions (read, write, delete, execute).
- **Examples:** - **Examples:**
- An Access Control List (ACL) on a file system that specifies which users or groups can read, write, or execute a particular file. - An Access Control List (ACL) on a file system that specifies which users or groups can read, write, or execute a particular file.

View file

@ -2,7 +2,7 @@
A straightforward governance structure for your Information Security Management System based on ISO 27001 and ISO 27002. A straightforward governance structure for your Information Security Management System based on ISO 27001 and ISO 27002.
*Based on [Governance model for Policies and Controls](../../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.* *Based on [Governance model for Policies and Controls](../Standards/ISO27x/Governance%20model%20for%20Policies%20and%20Controls.md), which contains the references to the Standard.*
## Policy Lifecycle: Who Does What ## Policy Lifecycle: Who Does What
### Key Players ### Key Players

View file

@ -8,17 +8,17 @@ A Business Impact Analysis (BIA) examines the potential impacts of disruptions,
The outcomes help to prioritize business activities and resources to enable the resumption of product and service delivery after a (major) disruption[^1]. The outcomes help to prioritize business activities and resources to enable the resumption of product and service delivery after a (major) disruption[^1].
Guidelines and tooling: Guidelines and tooling:
- [Guidelines for business impact analysis ISO 22317](../../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md) - [Guidelines for business impact analysis ISO 22317](../Standards/ISO27x/ISO%2022317%20Guidelines%20for%20business%20impact%20analysis.md)
- [Assessing reputational risks](../../Various/Assessing%20reputational%20risks.md) - [Assessing reputational risks](../Various/Assessing%20reputational%20risks.md)
- [BIA Workshop](../../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md) - [BIA Workshop](../Standards/ISO27x/Implementation%20Products/BIA%20Workshop.md)
- [TLP impact matrix](../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md) - [TLP impact matrix](Data%20classification/Traffic%20Light%20Protocol%20TLP.md)
- Afhankelijkheid tussen systemen/voorzieningen? - Afhankelijkheid tussen systemen/voorzieningen?
- Resource Breakdown Structure (RBS) - Resource Breakdown Structure (RBS)
- Fishbone Diagram (Ishikawa/Cause and Effect): Useful for identifying root causes of dependencies and resource constraints in processes. - Fishbone Diagram (Ishikawa/Cause and Effect): Useful for identifying root causes of dependencies and resource constraints in processes.
ISO 27001 Controls: ISO 27001 Controls:
- [5.29:](../../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption - [5.29:](../MoCs/ISO_27002_2022_5.29_MoC%20Information%20security%20during%20disruption.md) Information security during disruption
- [5.30:](../../MoCs/ISO_27002_2022_5.30_MoC%20ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity - [5.30:](../Information%20Security/ICT%20readiness%20for%20business%20continuity.md) ICT readiness for business continuity
- [5.9:](../../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets regarding assets marked Critical on the Availability aspect - [5.9:](../MoCs/ISO_27002_2022_5.9_MoC%20Inventory%20of%20information%20and%20other%20associated%20assets.md) Inventory of information and other associated assets regarding assets marked Critical on the Availability aspect
[^1]: See [Disaster Recovery Planning](Disaster%20Recovery%20Planning.md) [^1]: See [Disaster Recovery Planning](Disaster%20Recovery%20Planning.md)

View file

@ -1,6 +1,6 @@
# Classifying Integrity # Classifying Integrity
See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification) See also: [Business Impact Analysis (BIA)](Business%20Impact%20Analysis%20(BIA).md), [A 8.2 Information Classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md#ISO%2027001%20A%208.2%20Information%20classification)
Prompt to Perplexity AI on 2025-06-10: `In the field of information security, we identify and implement risk mitigating measures to safeguard the confidentiality, integrity, and availability of information. To establish levels of confidentiality, we use the instrument of data classification to establish levels of availability we can use business impact analysis. What instruments do we have to classify the necessity of integrity of information` Prompt to Perplexity AI on 2025-06-10: `In the field of information security, we identify and implement risk mitigating measures to safeguard the confidentiality, integrity, and availability of information. To establish levels of confidentiality, we use the instrument of data classification to establish levels of availability we can use business impact analysis. What instruments do we have to classify the necessity of integrity of information`

View file

@ -1,6 +1,6 @@
# Control ownership # Control ownership
See also [Risk ownership](../Risk%20ownership.md), [Asset ownership](Asset%20ownership.md) See also [Risk ownership](../Information%20Security/Risks/Risk%20ownership.md), [Asset ownership](Asset%20ownership.md)
Principe: Principe:
> Control ownership can best be assigned to the individual or team that has both the resources and the skills to effectively implement the control. (And does not have conflicting interests) > Control ownership can best be assigned to the individual or team that has both the resources and the skills to effectively implement the control. (And does not have conflicting interests)

View file

@ -7,4 +7,4 @@ Previous work:
Relevant ISO 27001 clauses/controls: Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 16.1 Management of information security incidents and improvements](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md) - [ISO 27001 A 16.1 Management of information security incidents and improvements](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2016.1%20Management%20of%20information%20security%20incidents%20and%20improvements.md)

View file

@ -2,7 +2,7 @@
**Definition:** **Definition:**
"A *data classification* identifies the value of the data to the organization. Classification labels, the method by which they are assigned, and the required protection associated with the different labels, are identified in a policy." "A *data classification* identifies the value of the data to the organization. Classification labels, the method by which they are assigned, and the required protection associated with the different labels, are identified in a policy."
Source: [CISSP_OSG_Chapter_5](../../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications) Source: [CISSP_OSG_Chapter_5](../../Standards/CISSP/CISSP_OSG_Chapter_5.md#Defining%20data%20Classifications)
Classification criteria should be risk based, for instance on potential damage to the organization, the privacy of individuals, national security, economic interests, or other critical concerns. Classification criteria should be risk based, for instance on potential damage to the organization, the privacy of individuals, national security, economic interests, or other critical concerns.
@ -54,11 +54,11 @@ It does not solve the classification labeling problem if you have a single manda
See also: See also:
[Datatags System](../../../Literature%20notes/Datatags%20System.md) [Datatags privacy oriented data classification system](Datatags%20privacy%20oriented%20data%20classification%20system.md)
[Def_Sec_Handbook_Chapter_2](../../../Literature%20notes/Def_Sec_Handbook_Chapter_2.md#Information%20classification) [Def_Sec_Handbook_Chapter_2](../../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_2.md#Information%20classification)
[ISO 27002:2022 NL A5.12](../../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md) [ISO 27002:2022 NL A5.12](../../Standards/ISO27x/OST/27002/NL/a-5.12-Classificeren-van-informatie.md)
[Designing an information management scheme](../../../Literature%20notes/Designing%20an%20information%20management%20scheme.md) [Designing an information management scheme](../Designing%20an%20information%20management%20scheme.md)
[Key Topics for a policy on handling classified information](../../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md) [Key Topics for a policy on handling classified information](../Policy%20examples/Key%20Topics%20for%20a%20policy%20on%20handling%20classified%20information.md)
[Traffic Light Protocol (TLP)](../../../Literature%20notes/Traffic%20Light%20Protocol%20TLP.md) [Traffic Light Protocol (TLP)](Traffic%20Light%20Protocol%20TLP.md)

View file

Before

Width:  |  Height:  |  Size: 634 KiB

After

Width:  |  Height:  |  Size: 634 KiB

Before After
Before After

View file

@ -3,12 +3,12 @@
Science. 2015101601. October 16, 2015. http://techscience.org/a/2015101601; PDF version attached: [](techsci-datatags-sweeneycrosasbarsinai.pdf). Science. 2015101601. October 16, 2015. http://techscience.org/a/2015101601; PDF version attached: [](techsci-datatags-sweeneycrosasbarsinai.pdf).
Related: Related:
- [ISO 27001 A 8.2 Information classification](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md) - [ISO 27001 A 8.2 Information classification](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.2%20Information%20classification.md)
- [Privacy 1](../Sparks/Privacy%201.md) - [Privacy in ISO 27001](../../Standards/ISO27x/Privacy%20in%20ISO%2027001.md)
Sweeney at all have developed a privacy oriented data classification system with six levels: Sweeney et all have developed a privacy oriented data classification system with six levels:
![](Datatags%20classification.jpg) ![](Datatags%20classification%20table.jpg)
*"Definitions for each of six datatags are introduced for demonstration purposes".* *"Definitions for each of six datatags are introduced for demonstration purposes".*
The classification is based on a five level scheme designed and adopted by Harvard University for storing and transmitting research data. The classification is based on a five level scheme designed and adopted by Harvard University for storing and transmitting research data.

View file

@ -0,0 +1,12 @@
# Examples of TLP document classification for different industries
- [for information security](FIRST%20TLP%20labeled%20document%20examples%20for%20information%20security.md)
- [for a commercial services organization](FIRST%20TLP%20labeled%20document%20examples%20commercial.md)
- [for a childcare organization](FIRST%20TLP%20labeled%20document%20examples%20childcare.md)
- [for a hospital](FIRST%20TLP%20labeled%20document%20examples%20hospital.md)
- [for a national government organization](FIRST%20TLP%20labeled%20document%20examples%20national%20government.md)
![](../../Information%20Security/Risks/TLP_Impact_matrix_NL.xlsx)

View file

@ -5,14 +5,14 @@ or: the FIRST TLP protocol
TLP provides a simple and intuitive schema for indicating when and how sensitive information can be shared, facilitating more frequent and effective collaboration. It employs four colors to indicate expected sharing boundaries to be applied by the recipient(s). ([source](https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage)) TLP provides a simple and intuitive schema for indicating when and how sensitive information can be shared, facilitating more frequent and effective collaboration. It employs four colors to indicate expected sharing boundaries to be applied by the recipient(s). ([source](https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage))
![](../Attachments/TLP_Impact_matrix_NL.xlsx) ![](../../Information%20Security/Risks/TLP_Impact_matrix_NL.xlsx)
[Examples of TLP document classification for different industries](Examples%20of%20TLP%20document%20classification%20for%20different%20industries.md) [Examples of TLP document classification for different industries](Examples%20of%20TLP%20document%20classification%20for%20different%20industries.md)
[Examples of measures for different TLP classifications](Examples%20of%20measures%20for%20different%20TLP%20classifications.md) [Examples of measures for different TLP classifications](Examples%20of%20measures%20for%20different%20TLP%20classifications.md)
[Voorbeelden van maatregelen bij verschillende TLP classificaties](Voorbeelden%20van%20maatregelen%20bij%20verschillende%20TLP%20classificaties.md) [Voorbeelden van maatregelen bij verschillende TLP classificaties](Voorbeelden%20van%20maatregelen%20bij%20verschillende%20TLP%20classificaties.md)
[Dataclassificatie volgens TLP](../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md) [Dataclassificatie volgens TLP](../../Standards/ISO27x/Implementation%20Products/Dataclassificatie%20volgens%20TLP.md)

View file

@ -67,4 +67,4 @@
* Documenten worden gelabeld met TLP:RED * Documenten worden gelabeld met TLP:RED
[^1]: Controls [5.19](../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]] [^1]: Controls [5.19](../../Standards/ISO27x/OST/27002/NL/a-5.19-Informatiebeveiliging-in-leveranciersrelaties.md), [[ISO_27002_2022_NL_BT 6.6 Vertrouwelijkheids- of geheimhoudingsovereenkomsten|6.6]], [[ISO_27002_2022_NL_BT 7.2 Fysieke toegangsbeveiliging |7.2]]

View file

@ -1,3 +1,5 @@
# Designing an information management scheme
Related: [ISO_27002_2022_5.12_PE Classification of information](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.12_PE%20Classification%20of%20information.md) Related: [ISO_27002_2022_5.12_PE Classification of information](../../../iso27DIY-gis/reference/Paraphrased/ISO27002-2022-EN/ISO_27002_2022_5.12_PE%20Classification%20of%20information.md)
Source: [ISMS Alliance](https://ismsalliance.com/trends/iso-27001-isms-risk-management/designing-an-information-management-scheme/) Source: [ISMS Alliance](https://ismsalliance.com/trends/iso-27001-isms-risk-management/designing-an-information-management-scheme/)

View file

@ -0,0 +1,9 @@
# Disaster Recovery Planning
See also:
- [a-5.30-ICT-readiness-for-business-continuity](../Standards/ISO27x/OST/27002/EN/a-5.30-ICT-readiness-for-business-continuity.md)
- [Business Continuity Planning (BCP)](../📚️%20Literature%20notes/BCP_Bedrijfscontinuïteitsplanning.md)
- [SANS Incident Response step 5 Recovery](../Standards/SANS/SANS%20Incident%20Response%20step%205%20Recovery.md)
- [Checklist for auditing Business Continuity and Disaster Recovery](../Literature/Checklists%20Gerardus%20Blokdyk/Checklist%20for%20auditing%20Business%20Continuity%20and%20Disaster%20Recovery.md)
- [CISSP_OSG_Chapter_18](../Standards/CISSP/CISSP_OSG_Chapter_18.md)
- [Def_Sec_Handbook_Chapter_6](../Literature/Defensive%20Security%20Handbook/Def_Sec_Handbook_Chapter_6.md)

View file

@ -1,3 +1,4 @@
# Functiescheiding: Typologie Starreveld
Voor fysieke assets zou de Typologie Starreveld gebruikt kunnen worden Voor fysieke assets zou de Typologie Starreveld gebruikt kunnen worden
https://www.typologiestarreveld.nl/controletechnische-functiescheiding/ https://www.typologiestarreveld.nl/controletechnische-functiescheiding/

View file

@ -3,11 +3,11 @@
https://www.isms.online/iso-27001/how-to-develop-an-asset-inventory-for-iso-27001/ https://www.isms.online/iso-27001/how-to-develop-an-asset-inventory-for-iso-27001/
Relevant ISO 27001 clauses/controls: Relevant ISO 27001 clauses/controls:
- [ISO 27001 A 8.1.1 Inventory of assets](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md) - [ISO 27001 A 8.1.1 Inventory of assets](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%208.1.1%20Inventory%20of%20assets.md)
- [ISO 27001 C 6.1.2 Information security risk assessment](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md) - [ISO 27001 C 6.1.2 Information security risk assessment](../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20C%206.1.2%20Information%20security%20risk%20assessment.md)
See also: See also:
- [Assets, Vulnerabilities, Threats, Risks](../../Literature%20notes/Assets,%20Vulnerabilities,%20Threats,%20Risks.md) - [Assets, Vulnerabilities, Threats, Risks](../Information%20Security/Risks/Assets,%20Vulnerabilities,%20Threats,%20Risks.md)
# 3D Asset Inventory # 3D Asset Inventory

Some files were not shown because too many files have changed in this diff Show more