Maturity Modelling to Prepare for Cyber Crisis Escalation and Management

Abstract

The aim of this study is to evaluate a newly developed maturity escalation model, that is based on ISO 27005 and ISO 27035 standards. The evaluation is done by applying the model to assess the maturity escalation level of an organization in the healthcare domain in Norway, which is called the Inland Hospital Trust. In this study, we applied several theories, including escalation management modelling. After using and analysing the maturity model in the healthcare organization context, we identified drawbacks of the current maturity escalation model, and suggest improvements.