Comparing Cyber Security Maturity and Information Security Maturity Models and Identifying Common Cyber Security Indicators

With the advent of the digital age, the need for governments and companies to use information technology to optimize performance, Business process smartening and provide remote services has increased. Thus, information technology and cyber security and information have also found a special place in the digital arena. Accordingly, one of the most serious dangers that governments face, which can also undermine national security, is cyber-attacks. These attacks cover a wide range of targets, one of the main of which is to damage critical infrastructure. Therefore, the sustainability of critical infrastructure in the face of such threats is crucial. This study, considering that the security of vital infrastructure is one of the most important factors in ensuring national security and passive defense, seeks to obtain the indicators of security of critical infrastructure through a comparative study method using library resources. In this study, 10 of the most important models of cyber security and information security maturity have been analyzed. The results of this study indicate that the studied models have a total of 93 indicators. Cyber security and information security maturity models are significantly similar; Therefore, some of the counted indicators overlap. Overlapping indicators were identified and classified into 17 groups. The results show that the "incident management" index with a frequency of 11 is the most important index in securing critical infrastructure, as well as physical security, monitoring, access-identity control, security policies and other indicators in They are next.