Cissp: Standards, Best Practices, And Frameworks

Front 1

ISO/IEC 27000 series

Back 1

Security Program Development, International standards on how to develop
and maintain an ISMS developed by ISO and IEC

Front 2

Zachman framework

Back 2

Enterprise Architecture Development, Model for the development of enterprise
architectures developed by John Zachman

Front 3

TOGAF

Back 3

Enterprise Architecture Development, Model and methodology for the development of enterprise
architectures developed by The Open Group

Front 4

DoDAF

Back 4

Enterprise Architecture Development, U.S. Department of Defense architecture framework that
ensures interoperability of systems to meet military mission goals

Front 5

MODAF

Back 5

Enterprise Architecture Development, Architecture framework used mainly in military support
missions developed by the British Ministry of Defence

Front 6

SABSA model

Back 6

Security Enterprise Architecture Development, Model and methodology for the development of
information security enterprise architectures

Front 7

CobiT

Back 7

Security Controls Development, Set of control objectives for IT management developed by
Information Systems Audit and Control Association (ISACA) and the
IT Governance Institute (ITGI)

Front 8

SP 800-53

Back 8

Security Controls Development, Set of controls to protect U.S. federal systems developed
by the National Institute of Standards and Technology (NIST)

Front 9

COSO

Back 9

Corporate Governance, Set of internal corporate controls to help reduce the risk
of financial fraud developed

Front 10

ITIL

Back 10

Process Management, Processes to allow for IT service management developed by the
United Kingdom’s Office of Government Commerce

Front 11

Six Sigma

Back 11

Process Management, Business management strategy that can be used to carry
out process improvement

Front 12

Capability Maturity Model Integration (CMMI)

Back 12

Process Management, Organizational
development for process improvement developed by Carnegie Mellon