Analytics

The Maturity Score provides a high-level measure of your organization's security maturity.

The score ranges from 0 to 100 and is calculated as the average impact score of all insights associated with your organization.

Foundational
Security practices exist but are not yet consistently applied across the environment.

‍

Defined
Security measures are being applied across the environment, but important areas still require improvement.

‍

Measured
Security and architectural practices are consistently applied and monitored across the environment.

‍

Optimized
Security practices are well established and aligned with organizational needs, with a focus on continuous improvement.

‍

The Maturity Trend chart shows how your Maturity Score changes over time.

Use this chart to monitor improvements and track progress toward higher maturity levels.

‍

How to Interpret This Chart

A healthy trend is one that moves upward over time.

For example:

• Defined → Measured

• Measured → Optimized

A declining maturity score may indicate that risks are increasing faster than they are being addressed.

‍

Track how the total number of insights changes over the selected reporting period.

This chart helps you understand whether the overall volume of findings in your environment is increasing, decreasing, or remaining stable over time.

‍

How to Interpret This Chart

Ideally, the overall number of insights should decrease over time as findings are addressed and resolved.

‍

Track how insights progress through their lifecycle over time.

This chart shows insights grouped by the following statuses:

• Open

• In Progress

• Closed

Use this chart to monitor remediation progress and understand how insights move from identification to resolution.

‍

How to Interpret This Chart

A healthy trend typically shows:

• Open insights decreasing over time

• Closed insights increasing over time

• In-progress insights remaining relatively stable

A growing number of in-progress insights without a corresponding increase in closed insights may indicate that work is being started but not completed.

‍

Understand how the severity of insights changes over time.

This chart groups insights by impact level, helping you identify whether higher-risk findings are being reduced over time.

‍

How to Interpret This Chart

Over time, you should expect to see:

• Fewer high-impact insights

• Fewer medium-impact insights

• More low-impact insights

For example, reducing a large number of high-impact insights to lower-impact findings may indicate that overall risk has been reduced, even if the total number of insights remains similar.

‍

Understand how risks are being addressed across your environment over time.

This chart groups closed insights by the following treatment categories:

• Mitigate

• Accept

• Transfer

• Avoid

Use this chart to understand how your organization responds to identified risks.

‍

How to Interpret This Chart

Mitigate is generally the preferred outcome, as it indicates that the underlying issue has been addressed. Over time, you would typically expect Mitigate to represent the largest portion of closed insights.

‍

An increasing number of Accept treatments may indicate that the organization is taking on more risk rather than addressing it.

‍

Transfer treatments are generally acceptable when risk is appropriately transferred to another party or control mechanism.

‍

A significant increase in Avoid treatments may indicate that business opportunities or initiatives are being avoided because of security concerns.

‍

When reviewing this chart, focus not only on the number of closed insights, but also on how those insights were resolved.

‍