Frequently Asked Questions (FAQs) for Assessment in the Digital Pathway

Quick Links

1. What is the purpose of the Digital Pathway Assessment?

2. Who should complete the Digital Pathway Assessment?

3. How is the assessment structured?

4. What does each maturity level (0–3) mean?

5. How long does it take to complete the assessment?

6. Can the assessment be completed as a self-assessment?

7. How often should we complete the assessment?

8. What should we do with the results?

9. Are there any tools or resources to support us during the assessment?

10. How does this assessment fit into the larger Digital Pathway framework?

11. What if we have questions during the assessment process?

12. Can assessment results be shared with external stakeholders?

FAQs

1. What is the purpose of the Digital Pathway Assessment?

The assessment is designed to help organisations evaluate and improve their digital and cybersecurity maturity. By identifying strengths and areas for improvement across key architecture areas, the assessment provides a roadmap for achieving compliance, operational resilience, and cybersecurity readiness.

2. Who should complete the Digital Pathway Assessment?

The assessment is best completed by a cross-functional team with representatives from IT, cybersecurity, data management, compliance, and executive leadership. Involving multiple departments ensures a comprehensive view of your organisation’s digital and cybersecurity capabilities.

3. How is the assessment structured?

The assessment is organised into five core architecture areas: Business, Data, Application, Technology, and Security. Each area contains exemplar statements, questions, and scoring criteria to evaluate specific capabilities. Users score each capability on a 0–3 maturity scale, from “Not Considered” to “Optimised.”

4. What does each maturity level (0–3) mean?

The 0–3 scale is used to assess each capability’s level of maturity:

• 0 – Not Considered: No practices are in place.

• 1 – Defined: Initial planning or awareness exists, but practices are limited.

• 2 – Managed: Policies and processes are implemented, and practices are operational.

• 3 – Optimised: Practices are fully embedded, continuously reviewed, and improved.

5. How long does it take to complete the assessment?

The duration will vary depending on the size and complexity of the organisation. For smaller organisations, the assessment may take a few hours, while larger organisations may require multiple sessions over several days to complete a thorough evaluation.

6. Can the assessment be completed as a self-assessment?

Yes, the assessment can be completed as a self-assessment. However, for more in-depth analysis, organisations may consider having a qualified practitioner guide the process, especially for more complex areas like data governance and cybersecurity.

7. How often should we complete the assessment?

It is recommended to complete the assessment annually or after any major organisational changes that affect digital or cybersecurity practices. Regular assessments help track progress and ensure continuous improvement toward higher maturity levels.

8. What should we do with the results?

The results can be used to identify priority areas for improvement and set specific targets for maturity progression. By comparing current scores with target levels, organisations can develop an action plan to close any gaps and advance through maturity levels.

9. Are there any tools or resources to support us during the assessment?

Yes, the Best Practice Resources section provides templates, guides, and examples to support the assessment process. Additionally, the Assessment Guide offers step-by-step instructions for completing each section of the assessment.

10. How does this assessment fit into the larger Digital Pathway framework?

The Digital Pillar Assessment is a core component of the larger Digital and Cybersecurity Pathway framework, which includes resources, exemplar statements, and best practices. The assessment guides organisations in meeting the framework’s standards and achieving Bronze, Silver, or Gold certification.

11. What if we have questions during the assessment process?

If you encounter any questions or uncertainties during the assessment, consult the How to Use This Knowledge Hub page for guidance on accessing support resources. Additionally, you may reach out to a practitioner or advisor for further assistance.

12. Can assessment results be shared with external stakeholders?

Assessment results can be shared if they align with the organisation’s goals and transparency requirements. The findings may serve as evidence of the organisation’s digital maturity and commitment to cybersecurity, potentially strengthening partnerships with clients, investors, and regulators.