Abstract

This paper is a continuation of our first paper dedicated to the presentation of the maturity model for information system (IS) risk management (RM). Its objective is to place the model proposed in the first paper on a case study by the assessment of the maturity of risk management for an IS-CRM (IS dedicated to customer relationship management (CRM)). The sequence of the model requires prior definition of an evaluation system incorporating the setting, the measurement and consolidation methods. In our case study we have gone through four steps: definition of studied components, evaluation of control objectives, calculate the maturity levels for each activity of the RM process and calculate the RM process maturity.

This work is licensed under a Creative Commons Attribution 4.0 License.