| Measuring Index | Security Maturity | Security Awareness |
| 0.00 - 0.50 | Non-existence | Non-existence |
| 0.51 - 1.50 | Ad-hoc | Poor |
| 1.51 - 2.50 | Planned | Satisfactory |
| 2.51 - 3.50 | Well-defined | Good |
| 3.51 - 4.50 | Managed | Very Good |
| 4.51 - 5.00 | Optimized | Excellent |