Toolkit
UTIOM · Maturity Assessment

What maturity level has your security operation actually reached?

Forty-five criteria across the six UTIOM maturity levels. Tick what is true today and the model returns the highest level you have genuinely completed — along with whatever is holding you one rung below it.

This assessment is staged, not averaged. A single unmet criterion at Level 2 caps you at Level 1, even if you satisfy criteria at Level 4. That is not a scoring quirk — each level depends on the one beneath it, so advanced practice built on a missing foundation does not compound.
Not started
Tick the criteria that are true today

Your maturity position

The level shown is the highest one where every criterion below it is also satisfied. Partial progress into higher levels is recorded but does not raise the level itself.

Level 0

Horizontal growth — unification across the three pillars

Maturity grows vertically through levels and horizontally across pillars. A level reached through engineering alone is narrower than the same level reached across all three.

Level completion

Criteria satisfied at each level. A level counts only when it and everything below it are complete.

Pillar balance

Horizontal growth across the three pillars. A level reached through one pillar alone is narrower than the same level reached across all three.

What is holding you back