Home
The IAM Maturity Index

How mature is your identity program?

A rapid, vendor-neutral self-assessment of your identity & access management across the six domains that decide whether you're breach-resilient or breach-bound. Answer 12 questions, get an instant maturity profile, a radar of your strengths and gaps, and tailored next steps. Built from 12+ years securing regulated enterprises — and relevant to any industry.

6 domains12 questions~2 min0 sign-up · 0 data stored
1 · Your industry — tailors the regulatory lens on your results
Private & anonymous — everything runs in your browser. Nothing is sent or saved.
DomainQuestion 1 of 12

Question

Pick the option closest to your reality today
Your result

Your identity maturity profile.

0.0out of 5.0
Regulatory lens

Domain breakdown

Your priority moves

The three domains where you'll get the most risk reduction for the least effort — each links to a practitioner playbook.

Discuss closing these gaps
How the score is calculated

A transparent, CMMI-style model — no black box:

  1. Each of the 6 domains is assessed by 2 behaviourally-anchored questions, each answered on a 1–5 scale (Initial → Optimised).
  2. A domain score is the average of its two answers (1.0–5.0).
  3. Your overall score is the mean of the six domain scores.
  4. The score maps to a maturity tier:
1.0–1.8 Initial1.8–2.6 Developing2.6–3.4 Defined3.4–4.2 Managed4.2–5.0 Optimised

Domains map to NIST CSF, ISO 27001, the ACSC Essential Eight and APRA CPS 234 — see the mapping in Measuring IAM Maturity. Everything is computed in your browser; no responses are stored or sent.

Copied ✓