GRCLibrary.ai

Standard

Maturity Assessment Methodology Standard

This standard defines the methodology for assessing governance programme maturity across the library's domains.

Type
Standard
Version
1.1.5
Date
2026-10-13
Owner
GRC Programme Manager
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Core Governance
Review frequency
Annual, or upon material change to the maturity model or assessment methodology
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Governance and accountability
  • 4. The maturity ladder
  • 5. Aggregation methodology (median-of-medians)
  • 6. The outlier-masking limitation
  • 7. The compensating floor-check
  • 8. Programme maturity, document maturity, and other maturity surfaces
  • 9. Boundary: maturity levels, not capability levels
  • 10. Structured, comparable measurement model
  • 11. Application and review cadence
  • 12. Framework alignment

Frameworks it maps to

Related documents