The accepted industry guideline is Capability Maturity Model Integration (CMMI) levels 3-4 (see Resources as a basis for pursuing an enterprisewide SOA security strategy.
受到广泛认可的行业指导原则是，将能力成熟度模型集成（Capability Maturity Model Integration，CMMI）3-4 级别（请参见 参考资料）作为实现企业 SOA 安全战略的基础。