CISSP Standards

Security Program Development 

• ISO/IEC 27000 series International standards on how to develop and maintain an ISMS developed by ISO and IEC 
  

Enterprise Architecture Development 

• Zachman framework Model for the development of enterprise architectures developed by John Zachman 
  
• TOGAF Model and methodology for the development of enterprise architectures developed by The Open Group 
  
• DoDAF U.S. Department of Defense architecture framework that ensures interoperability of systems to meet military mission goals 
  
• MODAF Architecture framework used mainly in military support missions developed by the British Ministry of Defence 

Security Enterprise Architecture Development 

• SABSA model Model and methodology for the development of information security enterprise architectures 

• Security Controls Development 
• CobiT Set of control objectives for IT management developed by Information Systems Audit and Control Association (ISACA) and the IT Governance Institute (ITGI) 
  
• SP 800-53 Set of controls to protect U.S. federal systems developed by the National Institute of Standards and Technology (NIST) 
  

Corporate Governance 

• COSO Set of internal corporate controls to help reduce the risk of financial fraud developed by the Committee of Sponsoring Organizations (COSO) of the Treadway Commission 
  

Process Management 

• ITIL Processes to allow for IT service management developed by the United Kingdom’s Office of Government Commerce 
  
• Six Sigma Business management strategy that can be used to carry out process improvement 
  
• Capability Maturity Model Integration (CMMI) Organizational development for process improvement developed by Carnegie Mellon