Question 5
Main Page
A CISO is measuring program success but is unsure what framework to adopt. What model is typically used to improve performance maturity?
A. ISO 27001
B. CMMI
C. NIST SP 800-53
D. COBIT
Answer: CMMI
CMMI (Capability Maturity Model Integration) is commonly used to assess and improve the maturity and performance of information security programs.