A credible baseline
Understand where capability is established, inconsistent or absent.
Cyber maturity for small & medium businesses
See your cyber risk.
Move with confidence.
Understand where your business stands, decide what matters next and turn insight into a practical cyber improvement roadmap.
Clarity. Capability. Confidence.
01See your current state
02Set a realistic target
03Focus investment
04Track improvement
From noise to direction
Cyber risk is complex.
Your next move shouldn’t be.
Security teams see controls. Executives see risk. Boards see exposure. The CSMM creates a shared language for all three.
It brings evidence, judgement and priorities together so improvement becomes a sequence of decisions—not another shelf of reports.
See the six domains ↓A level matched to your context
Define where each capability needs to be—not where convention says it should be.
A prioritised improvement path
Turn maturity gaps into practical areas for action and investment.
The whole operating picture
Six domains. One connected view.
The CSMM examines the management, human and technical capabilities that determine how well your organisation can anticipate, withstand and recover from cyber risk.
01
Governance & Risk Management
Strategy, accountability, risk decisions and oversight.
02
Protective Measures
Controls that reduce the likelihood and impact of compromise.
03
Detection Capability
Visibility and insight to identify suspicious activity early.
04
Response & Recovery
Preparedness to contain incidents and restore operations.
05
Compliance & Assurance
Evidence that obligations are understood and controls work.
06
Employee Training & Awareness
People equipped to recognise risk and act securely.
Interactive CSMM walkthrough
See how a maturity question
becomes a decision.
Explore an illustrative question and result. This walkthrough does not save data and is not an assessment.
CSMM walkthroughGovernance & Risk Management · Example
How consistently are cybersecurity responsibilities defined and understood?
Choose the description closest to your organisation today.
Illustrative overall score2.8Developing capability
CurrentTarget
Priority 010–3 months
Strengthen detection coverage
Clarify monitoring requirements, identify critical telemetry gaps and establish a regular review cadence.
Priority 020–3 months
Exercise incident responsibilities
Validate decision rights and hand-offs through a focused tabletop exercise.
Priority 033–6 months
Formalise assurance reporting
Create a concise evidence-based view for executives and the board.
Example only. Your assessment results depend on your organisation’s responses and context.
Free introductory assessment
Start with a clear baseline.
Complete a focused introduction to the CSMM and receive an initial view designed to help you start the right internal conversation.
Included at no cost
- Guided onboarding
- Initial overall maturity score
- Six-domain visualisation
- Key improvement areas
Getting startedStep 1 of 3
No credit card. Your full assessment continues securely in the C3 portal.
Get your initial maturity score →Annual access
Turn a point-in-time score
into sustained progress.
Start free. When you are ready to manage a structured improvement program, annual CSMM access brings your assessment, priorities and progress together.
IntroductionFreeNo credit card
- Focused introductory assessment
- Overall maturity score
- Six-domain visualisation
- Key improvement areas
Annual plan
CSMM PlatformTalk to usAnnual subscription
- Full CSMM assessment experience
- Current and target maturity views
- Prioritised improvement roadmap
- Progress tracking and reporting
- Secure organisational workspace
Pricing is tailored to organisation size and engagement needs. We will confirm scope and annual cost before you commit.
Clarity. Capability. Confidence.