Preparing for the Assessment

1. Form a Cross-Functional Team

Bring together the right people from across your business. Include representatives from:

• IT and cybersecurity

• Operations and data management

• Risk, compliance, or quality

• Leadership and strategic planning

Assign pathway leads for each digital architecture domain: Business, Data, Application, Technology, and Security.

---

2. Review Exemplar Statements and Maturity Criteria

Before scoring, familiarise your team with:

• The exemplar statements that describe good practice at each level

• The scoring system from 0 (Not Considered) to 3 (Optimised)

• How maturity scores relate to Pathway Levels (Bronze, Silver, Gold)

This will help ensure scoring is accurate and consistent across your team.

---

3. Gather Key Documentation

Collect any available evidence of your current digital and cybersecurity practices. This might include:

• Cybersecurity policies, risk registers, and incident response plans

• Data governance frameworks, audits, and data maps

• Application and infrastructure documentation

• Compliance certifications (e.g. ISO/IEC 27001, Cyber Essentials, GDPR)

Don’t worry if some documents are missing — the Pathway is also designed to help identify gaps.

---

4. Set Goals and Maturity Targets

Discuss your organisation’s ambition.

• Which Pathway Level do you aim to reach?

• Where are the most pressing areas for improvement?

• What does success look like in the short and long term?

This will focus your assessment and shape your improvement plan.

---

5. Prepare to Capture Observations

The assessment process is not just about scoring.

• Use the Observations & Opportunities section to record examples, concerns, or insights.

• These notes are essential for building your action plan and supporting your team’s learning.

---

Task List – Are You Assessment Ready? (Tick off the boxes as you go through)

• Cross-Functional Team Formed Leads assigned for Business, Data, Application, Technology, and Security.

• Exemplar Statements Reviewed Team has reviewed maturity descriptors and understands the 0–3 scale.

• Key Documentation Collected Any available cybersecurity, data, application, or compliance materials gathered.

• Target Pathway Level Set Agreement reached on Bronze, Silver, or Gold aspirations.

• Observation Plan in Place Responsibility for capturing strengths and gaps assigned.

---

Key Resources for Preparation

• Assessment Preparation Checklist – Use the list above to track readiness.

• Exemplar Statements and Maturity Model – Understand expectations for each level.

• Best Practice Resources – Use templates and case examples to support your approach.

---

What’s Next?

Once you’re ready, head to the Assessment Tool section. There you’ll find guidance on how to score your current position and generate your organisation’s Digital Pathway maturity level.