PR-02 + DM-03
Most maturity models are a ladder in a slide deck. Somebody reads the level descriptions, decides the company is a solid Level 3, and the number never gets checked again. This scores the same ladder from structured evidence instead of self-perception, across every area that has one, and puts your level next to the median for your industry so the answer means something.
FLAT MONTHLY PRICE FROM $49 · WHOLE COMPANY · NO PER-EMPLOYEE FEES
DIAGNOSTIC READINESS SCORE, NOT A CERTIFIED AUDIT
PRIORITIZED ACTION PLAN
ILLUSTRATIVE SCORES. DIAGNOSTIC INPUT, NOT A CERTIFIED AUDIT.
DIRECT ANSWER
LAST UPDATED AUGUST 2026
A maturity assessment measures how consistently and repeatably an organization does something, on a scale that runs from ad hoc and person-dependent up to measured and continuously improved. Most published models use five levels, and the sequence popularized by CMMI is the common ancestor: Initial, Managed, Defined, Quantitatively Managed, Optimizing. The distinction that decides your level is not whether a practice exists, it is whether the practice survives the departure of the person who invented it. Assessmentcloud scores five areas against an industry benchmark rather than one: process maturity (PR-02), digital and technology maturity (DM-03), skills and capability (SG-04), culture and engagement (CU-01), and compliance readiness (CR-05), each 0 to 100, mapped onto the five-level ladder, with the weakest area named first. Two things separate this from a consulting diagnostic. It is repeatable, because a flat plan from $49 a month for the whole company makes a re-score every six months realistic rather than a budget conversation, and it is benchmarked, so a Level 3 reads as ahead of or behind your sector instead of floating on its own. One boundary matters and we state it on every report: this is a diagnostic self-assessment, not a formal appraisal. It does not award a CMMI maturity level, and only a certified lead appraiser working to the published method can do that.
Go deeper: this dimension works alongside process maturity assessment and digital maturity assessment, and the guides on organizational maturity levels and cmmi maturity model show the frameworks behind the scoring.
Maturity modeling has a long public literature, and most of it descends from one family. These models tell you what the levels mean. What almost none of them ship is an affordable, repeatable way to find out which level you are actually on, which is the gap this fills.
| Model | Published by | What it covers | What it is for |
|---|---|---|---|
| CMMI, currently V3.0 | ISACA, which acquired the CMMI Institute. The model descends from the Software Engineering Institute at Carnegie Mellon | Practice areas across development, services, and supplier management, arranged on the five maturity levels that every later model borrowed | The reference standard, and the only one on this list that awards a formal, published maturity level. That appraisal is conducted by a certified lead appraiser, which is a funded project, not a self-assessment |
| People CMM, second edition | Software Engineering Institute lineage, same family as CMMI, second edition published 2009 | Five maturity levels describing how systematically an organization develops workforce capability | The workforce branch of the ladder. Thorough and dated, and heavy to run without help |
| ISO/IEC 33000 series | ISO and IEC. It replaced the ISO/IEC 15504 series, widely known as SPICE | A standardized framework for process assessment, including how to rate process capability and what makes an assessment valid | The formal, auditable route. Relevant if a customer or regulator requires a recognized standard rather than an internal read |
| Analyst digital maturity models | Gartner, Forrester, Deloitte and similar firms, each with its own proprietary model | Digital and technology maturity, usually four to six stages, benchmarked against the firm's own client base | Board-facing digital benchmarking. Rich comparison data, delivered as an engagement, and the underlying data is not public |
| Assessmentcloud | This platform | Process, digital, skills, culture, and compliance maturity, each scored 0 to 100 against an industry median and mapped to the five-level ladder | Finding out where you stand across every area, often enough to see a trend, without a funded appraisal |
The honest read of this table is that the first and last rows answer different questions. If you need a maturity level you can put in a contract or an RFP response, you need a formal appraisal against CMMI or an ISO/IEC 33000 assessment, and nothing self-serve substitutes for that. If you need to know which of five areas is holding the company back and whether last year's fixes moved anything, a funded appraisal is a slow and expensive way to find out. The guide to the five organizational maturity levels walks through what each level actually looks like day to day.
Process, digital, skills, culture, and compliance each get their own maturity score on the same 0 to 100 scale. Companies are rarely uniform: a Level 4 delivery process sitting on Level 1 data governance is the normal shape, and averaging it into a single number hides exactly the thing worth acting on.
Level descriptions are written so that everyone reads themselves generously. Scoring comes from structured question sets answered across roles, and the gap between what leadership rates and what the people doing the work rate is usually the most useful output of the exercise.
A maturity level in isolation is a word. Every dimension lands against an industry median, which turns "we are a Level 3" into "we are a Level 3 in a sector whose median is Level 4, and here is the area costing us the difference".
Maturity only shows up as a trend. At a flat monthly price for the whole organization you can re-score twice a year and see whether last cycle's changes actually moved a level, which is the measurement a one-time assessment can never give you.
Pick the areas that matter
Score all five dimensions or start with one. Teams usually begin with process maturity, because the symptom that sent them looking, work that goes well or badly depending on who picks it up, lives there.
Collect answers across roles
Question sets go to leadership and to the people running the process daily. Ratings from the two groups are compared rather than averaged, and where they diverge sharply the lower one is usually closer to reality.
Read the level and the evidence
Each dimension returns 0 to 100 against the benchmark, mapped to a level on the five-step ladder, with the evidence behind the rating shown and the weakest area ranked first.
Close one level gap, then re-score
Climbing a level is mostly documentation, ownership, and measurement, not new software. Fix the top-ranked gap, then re-run in six months and check the level held rather than assuming it did.
DIAGNOSTIC INPUT, NOT A CERTIFIED AUDIT.
Assessmentcloud scores tell you how ready you are and what to fix. They do not certify you against SOC 2, ISO 27001, or any legal framework, and we never claim they do. Only an accredited auditor can certify you. Run the diagnostic first, walk into the audit without surprises, and spend auditor hours on certification instead of discovery.
A maturity assessment measures how consistently and repeatably an organization performs a set of practices, rather than whether it performs them at all. It places the organization on a scale, usually five levels running from ad hoc and person-dependent up to measured and continuously improved, and identifies what would have to change to reach the next level. The output is a level plus the evidence behind it.
The widely used sequence comes from CMMI: Level 1 Initial, where work succeeds through individual effort and results vary; Level 2 Managed, where practices are planned and tracked at project level; Level 3 Defined, where a documented organization-wide standard exists and is followed; Level 4 Quantitatively Managed, where performance is measured statistically; and Level 5 Optimizing, where the organization improves the process itself using that data.
Ask about artifacts and behavior rather than intent. Three questions separate the levels reliably: is the practice written down somewhere a new joiner would find it, does it happen the same way when the person who designed it is on vacation, and is there a number attached that somebody looks at. A practice that fails the second question is Level 1 or 2 no matter how well it is documented.
The model is the scale, a description of what each level looks like. The assessment is the act of finding out which level you are on and producing the evidence for that answer. A model costs nothing to read and changes nothing; the assessment is where the useful and uncomfortable part happens, which is why most organizations have read a model and never been assessed against one.
No, and this distinction matters if a customer or an RFP is asking. A formal CMMI maturity level rating is issued only through an appraisal conducted by a certified lead appraiser working to the published appraisal method, and the result is recorded by ISACA. Assessmentcloud is a diagnostic self-assessment that uses the same five-level vocabulary because it is the common language. It tells you where you stand and what to fix; it cannot certify you.
Every six to twelve months for the areas you are actively working on. Maturity moves slowly, so quarterly readings mostly capture noise in who happened to answer, while a gap of several years turns the assessment into a fresh baseline rather than a trend. The second assessment is where the value appears, because it is the first one that can tell you whether anything you changed actually worked.
Yes, with one adjustment: assess fewer areas. A 30-person company genuinely is Level 1 on most formal process dimensions and that is often the correct place to be, so scoring all five dimensions produces a wall of low numbers that reads as failure rather than information. Pick the one or two areas where person-dependence is already costing you, usually process or compliance readiness, and treat the rest as deliberately deferred.
ILLUSTRATIVE FIGURES. NOT CUSTOMER DATA.
FLAT MONTHLY PRICE. NO PER-EMPLOYEE FEES.