Overview
This article walks you through the core steps for assessing your organization’s cybersecurity maturity using the NIST CSF 2.0 framework in Hyver. You'll learn how to navigate the Maturity page, rate subcategories, and understand how scores are calculated.
Step-by-Step Workflow
Open the Maturity Assessment
Go to the Maturity page
Select a Function, then a Category, then a Subcategory
This opens the maturity assessment section for that specific subcategory
Review and Rate Each Subcategory
Assess how your organization aligns with each subcategory
If no rating exists yet, select a level from 1 to 5, or choose Unknown or Not relevant
Use the maturity model as a reference if you're unsure how to rate
Check for Preexisting Ratings or Links
Some subcategories may already be rated
This can be from another team member or the CYE services team
In some cases, Hyver may auto-apply a rating using:
Linked findings
Linked technologies
Linked processes
Positive scoring from Hyver insights
Achieve Thresholds for Score Calculation
At least 50% of subcategories in a category must be rated to calculate that category's score
Enough rated categories automatically unlock scores for functions and eventually for the organization
Set Target Scores (Optional)
You can define a target maturity score at any time
Use this to track progress and guide continuous improvement efforts
Wrap-up / Next Steps
Maturity assessments don’t need to be completed in one sitting. Work through your functions and categories at your own pace. You can set targets early or after seeing your baseline — either way, the goal is the same: smarter planning and steady progress.