TIM-6705 v1

Christopher, J. (2018, November 1). Council Post: The cybersecurity maturity model: A means to measure and improve your cybersecurity program. Forbes.
This resource is important because it shares what a cybersecurity maturity model is, why organizations should have one, and how to choose the best model base on the National Institute of Standards and Technology cybersecurity framework (NIST CSF) and the cybersecurity capability maturity model (C2M2), which both provide a comprehensive approach that covers everything in cybersecurity.

Schwartz, M. J., & Ross, R. (2019, September 11). Government agencies field more cybersecurity maturity models. Bank Information Security.
This resource highlights how two federal government agencies persuaded its sectors to adopt cybersecurity capability maturity models in alignment with NIST Cybersecurity Framework.

Federal Financial Institutions Examination Council. (2017, May). Cybersecurity assessment tool. FFIEC.
This resource can help management and directors of financial institutions understand supervisory expectations, increase awareness of cybersecurity risks, and assess and mitigate the risks facing their institutions. Focus reading on two assessment factors: governance and resources.

Vincent, N. E., Higgs, J. L., & Pinsker, R. E. (2019). Board and management-level factors affecting the maturity of IT risk management practices. Journal of Information Systems, 33(3), 117–135.
This resource shows the result of a study that examines whether board involvement, board expertise, and top management's risk culture affect the maturity of IT risk management practices (maturity) in firms. Focus reading on the abstract and conclusion.