Model

The SOC-CMM model was initially created as a scientific research project to determine characteristics and features of SOCs, such as specific technologies or processes. From that research project onwards, the SOC-CMM methodology has evolved to become the de facto standard for measuring capability maturity in Security Operations Centers. At the core of the assessment tool lies the SOC-CMM model.


SOC-CMM model v2.4

The SOC-CMM model consists of 5 domains and 27 aspects, that are each evaluated using a number of questions. The domains 'Business', 'People' and 'Process' are evaluated for maturity only (blue colour), the domains 'Technology' and 'Services' are evaluated for both maturity and capability (purple colour).