Scoring and results
Understand scores and evidence coverage
Read maturity results, evidence measures and completion without confusing them with each other.
Updated 9 September 2026
Start with the assessment context
Open the report and check the assessment name, scope and period. The selected content determines how results are measured. This guide helps administrators explain the result to their organisation.
Read each measure separately
Maturity describes the assessed practice where the content uses a maturity scale.
Evidence describes the evidence measure recorded for the controls.
Completion shows progress through the assessment. A completed assessment does not necessarily have strong results.
Some controls use Yes and No rather than a 0 to 5 scale. Read the labels and methodology shown in that report. Do not treat every percentage as the same kind of score.
Check the detail
Read the overall result, then open the domain results.
Look for differences between the assessed practice and its supporting evidence.
Review Unknown, Not applicable and unanswered items. These have different meanings.
Check evidence coverage and any validation information shown. A recorded evidence answer is not the same as a reviewed supporting source.
Read the gates and red flags before drawing a conclusion.
Explain the result accurately
Use the assessment’s own labels and period when sharing a result. A maturity band summarises the score but does not replace the gate status. Missing data should not be described as a confirmed score of zero.
Assessment results help identify areas for review and improvement. They do not by themselves prove that every requirement has been met.