The new O-ISM3 version has been submitted for approval to the Security Forum of The Open Group. The main novelties of the new version are:

• Improved definition of types of metrics
• Added guidance on how to use metrics
• Improved definition of maturity levels
• Improved definition of management practices
• Tweaks in some processes
• Moved ISM3/ISO27001 guidance to a dedicated paper (already published)