NCSecMM: A National Cyber Security Maturity Model for an Interoperable ``National Cyber Security'' Framework

Security Maturity Model is a systematic approach that replaces traditional security metrics. There is more than one Security Maturity Model (SMM, COBIT, CERT/CSO, ISM3), and each of them has only five levels of maturity, providing the blueprint for a complete security program, telling management the order in which to implement security elements (ISM3 Consortium 2007), and leading toward the use of best practice standards (e.g., BS 17799). But none of them is dedicated to National Cybersecurity. We propose in this paper a ``National CyberSecurity Maturity Model{''}, that will make it possible to evaluate the security of a country or a whole region, making thus comparisons between them, and pointing out its forces and threats.