Scoring Reference
// 0-5 scale per control
0
Not Implemented
No activity exists. No awareness or tooling present.
1
Initial / Ad-hoc
Isolated efforts, undocumented and inconsistent.
2
Partially Implemented
Implemented for some projects, not consistently enforced.
3
Defined & Documented
Formally documented, adopted by most teams.
4
Fully Implemented
Fully enforced via automation, monitored.
5
Optimized
Continuous improvement cycles, benchmarking.