SOC-CMM INTRODUCTION
Methodology
The assessment methodology of SOC-CMM uses the SOC-CMM model and an assessment tool. This tool addresses all domains and aspects of the model through questions. These questions are answered on a 5-point scale.
The SOC-CMM assessment tool was initially designed for self-assessment purposes. Self-assessment, however, has limited objectivity. To make self-assessments somewhat more objective, guidance has been added to each maturity question. This guidance helps to select the right answer. Additionally, supporting yes/no questions have been added to verify completeness of processes and artifacts within the SOC. To further increase objectivity and value of the assessment, assessments can be conducted by 3rd parties. SOC-CMM has official support partners recognized for their quality and experience in SOC advisory and assessments.
In addition to full assessments, SOC-CMM also offers a screening tool based on the same model. However, this tool provides high-level output, and does not score in maturity levels.
The SOC-CMM assessment tool was initially designed for self-assessment purposes. Self-assessment, however, has limited objectivity. To make self-assessments somewhat more objective, guidance has been added to each maturity question. This guidance helps to select the right answer. Additionally, supporting yes/no questions have been added to verify completeness of processes and artifacts within the SOC. To further increase objectivity and value of the assessment, assessments can be conducted by 3rd parties. SOC-CMM has official support partners recognized for their quality and experience in SOC advisory and assessments.
In addition to full assessments, SOC-CMM also offers a screening tool based on the same model. However, this tool provides high-level output, and does not score in maturity levels.