符合NIS指令的网络安全成熟度评估框架
A NIS Directive compliant Cybersecurity Maturity Assessment Framework
摘要：
国家信息系统指令规定了基本服务运营商和数字服务提供商的网络和信息系统的安全义务，并要求国家主管当局评估其遵守这些义务的情况。本文描述了一种新的网络安全成熟度评估框架（CMAF），该框架是根据NIS指令的要求量身定制的，可以用作关键国家基础设施的自我评估工具，也可以用作国家主管部门的网络安全审计工具。
英文摘要：
The NIS Directive introduces obligations for the security of the network and information systems of operators of essential services and of digital service providers and require from the national competent authorities to assess their compliance to these obligations. This paper describes a novel cybersecurity maturity assessment framework (CMAF) that is tailored to the NIS Directive requirements and can be used either as a self assessment tool from critical national infrastructures either as an audit tool from the National Competent Authorities for cybersecurity.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
