Purpose This paper aims to clarify the uncertainty reflected in the current state of information security maturity evaluation where it has not enough matured and converged so that a generic approach or many specfics approaches become the go-to choice. In fact, in the past decade, many secruity maturity models are still being produced and remain unproven regardless of the existence of ISO 21827. Design/methodology/approach The authors have used the systematic literature review to summarize existing research, help identify gaps in the existing literature and provide background for positioning new research studies. Findings The authors highlighted the prevalent influence of the ISO/IEC 27001/27002 standard but raised the necessity for an in-depth investigation of ISO 21827. The authors also made the implementation facet a central topic of our review. The authors found out that, compared to the number of proposed models, implementation experiments are lacking. This could be due to the arduous task of validation and it could also be the reason why specific models are dominant. Originality/value While the research literature contains many experience reports and a few case studies on information security maturity evaluation, a systematic review and synthesis of this growing field of research is unavailable as far as the authors know. In fact, the authors only picked-up one bodywork [Maturity models in cyber security A systematic review (2017)] carrying out a literature review on security maturity models between 2012 and 2017, written in Spanish.

Being a socio-economic lever, the digital transformation presents several opportunities to companies of any sector. Nevertheless, aspiring to digitalization, companies are faced with several challenges, the main one is, the digitalization process. In lack of a digital strategy, companies tend to equate digitalization with IT integration, which implies confusion between the digitalization process and the IT integration process. The paper's aim is to question this observation, and call for a reorientation of company's digitalization vision from technology to strategy. In this paper, we contrast a study on the dimensions of digital transformation, supported by a survey on the strategic orientations of digital transformation, and the practices on the ground of this transformation, in order to highlight; the widespread confusion between digital transformation and ICT integration and the limitations of an IT-oriented understanding of the digital transformation.

No abstract

No abstract