What are the five PRISMA-based maturity levels in order?

What are the five PRISMA-based maturity levels in order?

• A. Implementation, Measurement, Managed, Policy, Procedure
• B. Policy, Procedure, Implementation, Measured, Managed
• C. Managed, Policy, Measured, Procedure, Implementation
• D. Implementation, Policy, Managed, Procedure, Measured

Answer: (B)

The PRISMA model emphasizes a structured approach to maturity levels in information security management, representing the progressive enhancement of practices and processes within an organization. The correct sequence of the five PRISMA-based maturity levels is essential for organizations to develop their security practices methodically. The first level, Policy, involves establishing the foundational security policies that guide an organization’s approach to information security. This level sets the expectations and direction for all subsequent processes. Next comes Procedure, where organizations begin to develop and document the procedures that will give life to the policies. This stage is about translating policy intentions into actionable steps. Once foundational policies and procedures are established, the Implementation level is reached, signifying that the procedures are actively being put into practice. This is where organizations ensure that the planned security measures are executed effectively. As an organization matures, it enters the Measured stage, where it begins to assess the effectiveness of its implemented procedures. This involves performance metrics and assessments to identify areas for improvement or enhancement. Finally, the Managed level represents the highest maturity point, where processes are not only measured but actively managed and refined based on the assessments performed. At this level, there is a continuous effort to improve security measures using data-driven insights. By understanding these levels, organizations

The PRISMA model emphasizes a structured approach to maturity levels in information security management, representing the progressive enhancement of practices and processes within an organization. The correct sequence of the five PRISMA-based maturity levels is essential for organizations to develop their security practices methodically.

The first level, Policy, involves establishing the foundational security policies that guide an organization’s approach to information security. This level sets the expectations and direction for all subsequent processes.

Next comes Procedure, where organizations begin to develop and document the procedures that will give life to the policies. This stage is about translating policy intentions into actionable steps.

Once foundational policies and procedures are established, the Implementation level is reached, signifying that the procedures are actively being put into practice. This is where organizations ensure that the planned security measures are executed effectively.

As an organization matures, it enters the Measured stage, where it begins to assess the effectiveness of its implemented procedures. This involves performance metrics and assessments to identify areas for improvement or enhancement.

Finally, the Managed level represents the highest maturity point, where processes are not only measured but actively managed and refined based on the assessments performed. At this level, there is a continuous effort to improve security measures using data-driven insights.

By understanding these levels, organizations