Overview
This article introduces the maturity assessment in Cye Exposure Management Platform, a structured way to evaluate the organization's cybersecurity posture. to evaluate your organization’s cybersecurity posture. You'll get familiar with how NIST functions, categories, and subcategories are organized and rated, and how to begin navigating the assessment process.
What Is a Maturity Assessment?
The maturity assessment in the Cye platform helps calculate a maturity score that reflects how well your organization is positioned to prevent, detect, and respond to cyber threats. It gives you visibility into security strengths and weaknesses, using the NIST Cybersecurity Framework (CSF) as its backbone.
How the Framework Is Structured
NIST Functions (e.g., Protect, Detect) are listed on the left of the Maturity Assessment page
Each function contains Categories (e.g., Access Control)
Each category is divided into multiple Subcategories, which represent specific security practices
You evaluate each subcategory using the maturity model rating system (1–5, Unknown, or Not relevant)
How to Begin
In the left navigation bar, go to Assessments → Maturity.
Select a Function to expand its list of Categories:
Select a Category to view its Subcategories:
Click a Subcategory to open the detailed maturity pane:
Review all information on the screen before rating
You’ll reference the maturity model guidelines and may add links to supporting technologies, processes, or findings as part of your assessment.
Wrap-up / Next Steps
This is your starting point. Next, you’ll dive into specific actions like assigning ratings, leaving comments, and linking findings. The more accurately you complete each subcategory, the more reliable your overall maturity score will be.