All businesses need information security to protect our systems from the risk of threats. This Open Information Security Management Maturity Model (O-ISM3) supports information security practitioners in this fundamental task by covering the key areas required to minimise these threats:

• Risk Management : identifying and estimating levels of exposure to the

likelihood of loss and how to manage those risks of loss;

• Security Controls : crafting the IT Security Policy which assures operati...