Framework 4 of 6 · Detailed Reference Edition
CT4-MATURITY™ — Detailed
The complete 30-control matrix with full descriptions for every cell — 6 levels × 5 domains.
CT4-MATURITY™ · Complete Detailed Matrix · From: Cybersecurity Transformation, Chapter 12
How to Read This Matrix
Reading the CT4-MATURITY™ Matrix
- 📊 Vertical axis (rows): The 6 maturity levels — Foundation → Fundamentals → Hardened → Protected → Secured → Resilient.
- 📈 Horizontal axis (columns): The 5 cybersecurity domains — Assets & Data, Detect & Test, Identity & Access, Protect & Build, Govern & Sustain.
- 🎯 Each cell: A specific control with a full description of what to implement at that domain × level intersection.
- 🚀 Total controls: 30 (6 levels × 5 domains).
- 📍 Your roadmap: Implement all 5 Level-1 controls first. Then Level 2. And so on. Sequential progression up the matrix.
- 💡 SMB target: Most SMBs should aim for Level 4 (Protected) — defensible against the majority of real-world threats without enterprise budgets.
Apply CT4-MATURITY™ to Your Organization
Get a personalized maturity score and 24-month roadmap.