displayName
Security Control Maturity Assessment
workflowKind
governance
triggerType
scheduled
typicalCadence
semi-annually
complexity
cross-team
description
Assesses security control maturity against industry frameworks --
mapping implemented controls to NIST CSF, CIS Controls, and ISO
27001 requirement sets, scoring each control domain on a maturity
scale from initial through optimized, identifying control gaps where
framework requirements lack corresponding implementations, evaluating
automation level and evidence-collection maturity for each control,
benchmarking maturity scores against industry peers and regulatory
expectations, and developing prioritized roadmaps to advance maturity
in lagging domains. Produces control maturity heat map, gap analysis,
and maturity advancement roadmap. Excludes control implementation and
framework selection.