MPMaturityPath
Eight frameworks · COBIT through King V and GWEA

Measure where your organisation is.
Plan where it must be.

One assessment, every framework that matters. Score your current maturity or compliance level against any of eight standards, set targets at one, two, three and five years, and leave with a resourced, scheduled roadmap your EXCO and board can read — each activity traced to its published source.

Start an assessment
8
framework scales
4
target horizons
1
printable report

The library

Use one standard, or combine several.

Each framework keeps its own published maturity scale and level definitions, so you score in the language your auditors already use.

COBIT

Capability levels 0–5

Governance and management objectives across EDM, APO, BAI, DSS and MEA.

  • Evaluate & direct
  • Align & plan
  • Build & run
  • Deliver & monitor

ISO/IEC 27001/2

Conformity 0–5

Management-system clauses and Annex A control themes for information security.

  • Context & leadership
  • Risk & controls
  • Operation
  • Evaluation

NIST CSF

Tiers 1–4

Govern, Identify, Protect, Detect, Respond and Recover outcomes for cyber risk.

  • Govern
  • Identify
  • Protect
  • Detect & respond

ITIL 4

Maturity 1–5

Service management practices, from incident and change through continual improvement.

  • Service desk
  • Incident & problem
  • Change
  • Improvement

JS 1 of 2023

Maturity 0–5

South African Joint Standard 1 of 2023 (FSCA and PA) for IT governance and risk management, effective 15 November 2024.

  • Board oversight
  • IT risk
  • Cyber & third party
  • Assurance & reporting

POPIA

Compliance 0–5

The eight conditions for lawful processing, Information Officer duties, safeguards and data subject rights.

  • Accountability
  • Lawful processing
  • Safeguards
  • Data subject rights

King V (2025)

Governance maturity 0–5

Principles and recommended practices for governing technology and information, replacing King IV.

  • Leadership
  • Ethics & culture
  • Strategy & value
  • Technology governance

GWEA

Architecture maturity 0–5

The DPSA Government Wide Enterprise Architecture framework, from architecture governance through migration planning.

  • Architecture governance
  • Business & information
  • Application & technology
  • Migration planning

South African and international standards in one library. Administrators can extend it with additional question sets and their own scales, and every item is recorded in the licensing register with its edition and citation.

The path

Four steps from first score to signed-off plan.

  1. 01

    Scope the entity

    Name the organisation being assessed, choose one or several standards, and invite contributors to the domains they own.

  2. 02

    Score current level

    Drill from objective to practice to activity, then pick the level that reflects today — one selection from that framework's own scale, each level's definition in view.

  3. 03

    Set the horizons

    Record the preferred level at one, two, three and five years. The gap between today and each horizon becomes the plan.

  4. 04

    Generate the roadmap

    Run a rule-based gap analysis or an AI draft, then edit activities, roles, effort, cost and dates on a five-year schedule before you print.

    Report & print

Two ways to analyse

Rule-based gap analysis for a deterministic, repeatable result — or an AI-drafted roadmap your team then edits line by line.

Solo or side by side

Run an assessment alone, or invite contributors and assign them framework domains. Everything saves as a draft, so work resumes where it stopped.

Report that prints

Current versus target per framework, a five-year schedule of every action, and roles, effort and cost — on screen and in a clean print layout.

Traceable to source

Each activity carries its framework reference and edition, and a licensing register records how every source may be used.

Turn a standards gap into a plan.

Create your entity, choose your frameworks, and start scoring in minutes.

Create your first assessment