IS CS Maturity Model

The Maturity Assessment, also called as Gap Assessment can be used initially for assisting the
organization to be compliant with ISO 27001 framework. This is mainly utilized to identify the gaps
and initiate the roadmap for further establishments.

The Maturity Assessment focuses on the implementation and management of cybersecurity

practices associated with the information technology (IT) and the environments in which they
operate. The model can be used to:

 Strengthen organizations’ cybersecurity capabilities

 Enable organizations to effectively and consistently evaluate and benchmark cybersecurity
capabilities
 Share knowledge, best practices, and relevant references across organizations as a means to
improve cybersecurity capabilities
 Enable organizations to prioritize actions and investments to improve cybersecurity

Intended Audience
1) Decision makers (executives) who control the allocation of resources and the management of risk
in organizations; these are typically senior leaders

2) Leaders with responsibility for managing organizational resources and operations associated with
the domains of this model

3) Practitioners with responsibility for supporting the organization in the use of this model (planning
and managing changes in the organization based on the model)

4) Facilitators with responsibility for leading a self-evaluation of the organization based on this
model and the associated toolkit and analyzing the self-evaluation results