Security Maturity Assessment

During this workshop, variables like company size, goals, complexity, and the scope of the assessment are determined. We perform a quick scan based on the selected standard or framework. After half a day of interviews and reviewing key documentation, you will get an initial estimate of the information security maturity of your organization.

By default, Secura offers the Security Maturity Assessment on the following frameworks and standards. However, other assessments can be carried out after consultation.

• ISO/IEC 27001 (2013 and 2022)
• NIST Cyber Security Framework (CSF)
• NIST CSF – Ransomware Resilience (RR)
• IEC62443 for OT environments
• NEN7510 for Medical environments
• BIO for Dutch Municipalities

After the workshop, a maturity review can be initiated. We will perform an expert review of the organizational maturity. The maturity is determined based on the five levels of the Capability Maturity Model (CMM).

Instead of a review, we can perform a full audit. This is aimed at larger organizations or organizations which are already at a high level of maturity. The process is largely the same, but the quality of operational effectiveness will be verified more in-depth by the Secura consultants.

Before we start the Security Maturity Assessment, we can perform a risk assessment, based on the ISO/IEC 27005:2018 standard.

An improvement plan with a prioritized list of concrete action items can be provided after the assessment. Let Secura help you raise your cyber resilience.