Overview
When a finding is marked as fixed in the Cye Exposure Management Platform, it is automatically assigned a default maturity level. This article explains how to assign a different level during the fix process, ensuring the updated score accurately reflects the organization's improved security posture.
How It Works
By default, a fixed finding is assigned a maturity level of 3 (Defined)
This value can be changed during the fix process
Steps to Assign or Change the Maturity Level
Fix the finding
Open the finding to mark as fixed
Click Fix
Review the Fixed Finding Dialog
A dialog appears to confirm the fix
The maturity level will be pre-filled with the default value of 3
Adjust if needed
Use the dropdown to select a different maturity level (1–5)
Choose a score that reflects the actual improvements made
The maturity level can always be edited later in the Standards tab, provided the finding remains in a fixed state and the correct permissions are in place.
Wrap-up / Next Steps
Assigning a thoughtful maturity level during the fix process gives the assessment more meaning. It shows not just that issues were resolved — but how far the organization has advanced.