Skip to main content

Maturity Scores

Track your cybersecurity maturity over time and across NIST functions.

Updated over 5 months ago

Overview

The Maturity Scores section of the Risk Dashboard gives you a clear view of your organization’s cybersecurity maturity — both overall and by NIST function. This article walks you through how to read the graphs, what each icon means, and how to use the trends to guide your strategy.
It’s a reliable way to track improvements and compare against targets and industry benchmarks.


Maturity by NIST Function

This chart breaks down your maturity scores across the five — or six, depending on your framework — NIST Cybersecurity Framework functions.
If you're using NIST 1.1, the five functions are: Identify, Protect, Detect, Respond, and Recover.
If you're using NIST 2.0, the six functions are: Govern, Identify, Protect, Detect, Respond, and Recover.


Here's how to read the graph:

  • Arrow next to the score: Shows whether the maturity score has increased or decreased since the last assessment:

  • Vertical dots: Represent your target maturity score for each function:

  • Inverted triangle: Represents the industry average — the typical maturity level for companies in your sector:

Hover over each function to view more details about that area’s current score, target, and trends:


Maturity Trends

This graph shows how your maturity scores evolve month by month:

  • Tracks both individual NIST functions and overall organizational maturity.

  • Click items in the legend to toggle them on or off for easier focus.

  • Hover over the graph’s data points (small circles) to see exact maturity scores and the date:

Dashed lines mark months where data is incomplete — typically the current month, where the starting score is known but the end-of-month value is still pending:


Data Refresh

  • Maturity data is refreshed every 60 minutes, so you’re always looking at near real-time insights.


Important notes

  • Maturity is calculated using the NIST framework and is influenced by findings, processes, and your overall security posture.

  • Keep targets realistic and up to date — they help contextualize where you're making progress and where more investment may be needed.


Wrap-up / Next Steps

Use maturity scores not just to track progress — but to tell a story. Whether you’re reporting to stakeholders or planning internal improvements, these views give you a strategic roadmap to stronger security.
Check back regularly to see trends emerge — and celebrate the milestones along the way.

Did this answer your question?