Review by C. Paidhrin: "As an IT Security manager, I'm driven by divergent priorities and demands. Having O-ISM3 on my Kindle, as a ready reference, helps me to maintain focus on what aligns with better practices. Every value-add service should have an associated maturity model. O-ISM3 is a respectable alternative to COBIT5, though I use COBIT5, and it aligns well with ITIL--the essential IT service delivery framework. There is no better, or more clear a maturity model for the price."

Education

• O-ISM3 Courses
• The Open Group's O-ISM3 Webminar Series

Compatiblity

• Combining The Open Group Standards, O-ISM3 and TOGAF®, with the SABSA® Framework
• Optimizing ISO/IEC 27001 using O-ISM3
• Using the O-ISM3 Standard with the CPNI 20 Critical Security Controls (CSC) for Effective Cyber Defense
• Using The Open Group Standards – O-ISM3 with TOGAF®

Success Cases

• Cajamadrid
• Swiss Army
• National Bank of Panama
• Systems Powering Healthcare Ltd

Articles

• Usefulness of an Information Security Maturity Model, ISACA Control Journal, 2008
• The Information Security Assurance Markup Language in the Computer Society of India Newsletter, August 2007
• Security Metrics for Information Security Management in the ENISA Quarterly, July 2007
• Return on Security Investment in the ISSA Journal, December 2006
• ISM3: A Standard for Information Security Management in the ISSA Journal, October 2006
• On Information Security Paradigms in the ISSA Journal, September 2005

Presentations: