How do you assess governance maturity?

• A. By revenue.
• B. By random guess.
• C. Use a maturity model (e.g., COBIT, CMMI, or custom), assess processes, capabilities, governance performance, and improvement plans.
• D. It is not a formal practice.

Answer: (C)

Assessing governance maturity means using a structured framework to measure how grown and capable an organization’s governance practices are. A maturity model provides levels or stages that describe how well processes are defined, implemented, controlled, and continuously improved. By applying a framework such as COBIT for IT governance, CMMI for process improvement, or a custom model, you evaluate where current practices sit on those levels and how they perform in real governance outcomes. The assessment looks at the quality of processes and capabilities, how governance actually performs (results, risk management, compliance, alignment with strategy), and whether there are concrete plans to raise maturity over time. This creates a repeatable, evidence-based picture of progress and priorities. Revenue, guessing, or claiming governance isn’t formal don’t offer a structured way to gauge maturity or drive improvement.