Equal weighting across all security domains
Domain Weighting
Technical Sovereignty
1.0×
Operational Sovereignty
1.0×
Assurance Sovereignty
1.0×
5-Level Maturity Model
Initial
(0-20%)
Unpredictable, reactive
Managed
(21-40%)
Planned, basic controls
Defined
(41-60%)
Standardized, documented
Quantitatively Managed
(61-80%)
Measured, controlled
Optimizing
(81-100%)
Continuous improvement