Assessment Results
1
Initial
Policy or standard does not exist or is not formally approved by management.
2
Repeatable
Policy or standard exists, but has not been reviewed in more than 2 years.
3
Defined
Policy and standard exists with formal management approval. Policy exceptions are documented, approved and occur less than 5% of the time.
4
Managed
Policy and standard exists with formal management approval. Policy exceptions are documented, approved and occur less than 3% of the time.
5
Optimizing
Policy and standard exists with formal management approval. Policy exceptions are documented, approved and occur less than 0.5% of the time.
