Information technology — Process assessment — Process capability assessment model for information security management

ISO/IEC TS 33072:2016:

• - defines a process assessment model (PAM) that meets the requirements of ISO/IEC 33004 and that supports the performance of an assessment of process capability by providing indicators for guidance on the interpretation of the process purposes and outcomes as defined in ISO/IEC TS 33052 and the process attributes as defined in ISO/IEC 33020;
• - provides guidance, by example, on the definition, selection and use of assessment indicators.