# Analysis of Enterprise Internet of Things Maturity Models: A Review
## 5 Results and Analysis
### 2 What Do the Proposed IoT Maturity Models Consider the Main Dimensions?
Data and information: These categories cover the management analysis of data and information generated and exchanged by IoT solutions [69], such as data formats, structures, standards, quality, interoperability [47], cloud computing [65], Big data [66], business intelligence [13], and predictive analytics, among others. The measurement process evaluates the degree of data collection, storage, processing, use, value creation, and decision-making based on data and information [55]. Also, the evidence collected considers the sources, formats, structures, quality, and availability of data and information generated, collected, stored, processed, analyzed, and exchanged [13] by IoT devices, systems, platforms, and networks. Specific elements addressed in these dimensions are data quality issues [48], data quality characteristics, data quality methods, data quality measurement and assessment, data security, and enabling smart connected products. Process and application: The dimensions covered in this section encompass the design, implementation, and management of IoT solutions that support business processes and customer needs [70], such as product [59] and service [67] development, testing, deployment, implementation, governance, monitoring, and maintenance [52]. The measurement process assesses the degree of alignment, integration, and optimization of IoT solutions with business processes and customer requirements and the impact and benefits of IoT solutions on operational and functional performance [43; 56]. In addition, measurement considers the effects and outcomes of the IoT technology, data, information, application, and service on the organization or system and external stakeholders [62], such as customers, partners, suppliers, regulators, and society [51]. It is important to note that these types of dimensions are less frequent in maturity models, and aspects such as the absolute value of applying this type of mechanism in the enterprise should be included. Security and privacy: This category covers dimensions related to the protection and preservation of security and privacy of IoT solutions in organizations [18], such as confidentiality [67], integrity, availability [60], authentication, encryption, security updates, vulnerability assessment and remediation, attack tolerance and recovery, and access control [57; 67]. The measurement process evaluates the degree of implementation and compliance with security and privacy measures and practices and IoT solutions' management, risk, and threat mitigation [71]. This section highlights the methods and tools that enable the identification, collection, preservation, examination, analysis, and presentation of digital evidence in IoT incidents, considering the availability, adequacy, and suitability of forensic tools and techniques, as well as the degree of compliance, policy, and standardization they provide. It is important to note that these categorizations are only strictly followed in some maturity models but are the most considered when building this type of mechanism. Furthermore, these dimensions are not mutually exclusive. However, they are interrelated and interdependent, seeking to capture the complexity and diversity of IoT technology and its applications and provide a comprehensive and flexible framework for assessing and improving the IoT maturity level of different organizations and domains. * **Organizational dimensions** In maturity models, an organizational dimension refers to an entity's different aspects or areas whose maturity can be assessed, typically corresponding to different business functions or organizational capabilities [72]. The maturity measurement process for IoT adoption and implementation considers several organizational dimensions, factors, or elements that reflect the organization's strategic, managerial, operational, and technical aspects. Due to the diversity of elements within an enterprise, multiple factors and dimensions related to the organization can be categorized.