How this differs from the headline maturity model
Where the security-accessibility maturity model is for assessment by teams, this version is structured for external benchmarking — designed so two organisations using it produce comparable scores.
← All frameworks
Maturity
Accessibility–security maturity model
Evaluate how well accessibility and security are embedded, aligned and maintained. Moves beyond checklists — mapping real capability, ownership and behaviour across five defined levels of maturity.
Who it's for
Organisations ready to move past compliance theatre and benchmark themselves against what good actually looks like.
When to use it
Annually, in parallel with the security maturity assessment. Or any time someone asks "how do we compare?"
The dimensions
- Ownership — who is accountable, and is it the right person.
- Capability — do the teams actually have the skills.
- Behaviour — what do people do when nobody is watching.
- Evidence — can you prove your level, or is it self-assessed optimism.
- Adaptation — does the model improve when the organisation changes.
In practice
How to run it
- 1
Score yourselves first — privately and honestly.
- 2
Have a second team score you blind. Compare.
- 3
Identify the single dimension where moving up one level would have the biggest downstream effect.
- 4
Re-assess annually. Track the trend, not the absolute score.
Want the full story?
The frameworks are most powerful alongside the case studies, research, and playbooks in the book.
Buy Access Denied →