hamburger hamburger

How the Model
Works

The model evaluates each dimension across three maturity levels.
Few agencies are at the same level across all six, and not every agency needs to be. What matters is that the dimensions you have invested in are working together.

Foundational arrow
The basics exist somewhere, but coverage is uneven and most of the work is manual.
Managed arrow
Practices are defined and applied across most of the organization, with automation handling routine work.
Optimized arrow
Practices are operationalized, enforced through the platform, and continuously improved.
The value of the model is not a single score. It is seeing where the gaps between dimensions may be creating risk or limiting the value of investments you have already made. A strong analytics culture built on ungoverned data creates confident decisions based on unreliable information. A mature security posture without a data catalog means you are protecting assets you cannot fully see.

What You Walk Away With

A Score Across
All Six Dimensions

A profile showing where you are strong, where you are not, and where the difference matters most. And not a single averaged score that hides where the real gaps are.

A Narrative of
Your Current State

Plain-language guidance describing what your profile means in practice and where misalignment between dimensions may be limiting investments you have made.

A Starting Point
for Prioritization

Specific guidance on where to focus first, based on your profile rather than a generic best-practice roadmap.

A Basis for the Internal
Conversation

Results you can share with your leadership team to align on priorities, build the investment case, and decide where to begin.

For a deeper treatment of the model, including the underlying argument and what good looks like across each dimension:

Download The Full White Paper

Before You Start

Answer each question based on your organization's current reality, not its aspirations or what is documented in policy. The results are a practical starting point for understanding where to focus next, not a comprehensive audit.

Rating scale

Absent: Not in place

Informal: In place in limited or informal ways

Defined: Partially defined and applied to some priority areas

Enforced: Well defined and consistently applied in many areas

Optimized: Fully operationalized, enforced, and continuously improved


If a rating feels between two levels, pick the one that better describes most of your organization most of the time. The assessment is most valuable when shared with the people in your agency who see different parts of the data foundation.


Most leaders complete the assessment in about 30 minutes.