A CISO is evaluating the maturity of the security program using CMMI. The organization consistently follows defined, documented processes but does not yet measure process effectiveness. Which maturity level does this represent?
-
A
Level 1 – Initial
-
B
Level 2 – Managed
-
C
Level 3 – Defined
-
D
Level 4 – Quantitatively Managed