Devensa Advisory
Get started
TruMaturity™

One governance maturity framework across six domains.

Every domain is scored on the same 1–5 scale. Domain scores average into one overall TruMaturity™ score, which sets the governance tier and drives the roadmap, the budget conversation, and board reporting.

Question score
1 to 5 per question

Each question is answered against defined maturity anchors rather than a subjective rating.

Domain score
Average of the domain's questions

Ten questions per domain, scored against documentation, interviews, and evidence.

Overall score
Average of the six domain scores

Each domain carries equal weight, so a gain anywhere raises the same overall measure.

The 1–5 maturity scale

What each level means.

1
Ad Hoc
No formal governance.
How it shows up

The work happens because a particular person cares about it. Nothing is documented, and nobody could repeat it without them.

To reach the next level

Name an owner and write down what is already being done.

2
Emerging
Emerging practices.
How it shows up

Some teams do it well, others not at all. Quality tracks the individual rather than the process.

To reach the next level

Standardize on one documented practice with clear accountability.

3
Structured
Structured and repeatable.
How it shows up

There is a policy, an owner, and a process a new hire could follow. Practice matches the document.

To reach the next level

Add measurement: a cadence, retained evidence, and a reported result.

4
Managed
Managed with metrics.
How it shows up

The process runs on a schedule, produces evidence, and is reported to leadership in a consistent format.

To reach the next level

Use the measurement to change the process, not only to report it.

5
Optimized
Optimized and integrated.
How it shows up

Results feed back into design, and the domain is integrated with the other five rather than run beside them.

To reach the next level

Hold the level through turnover and budget cycles.

Governance tiers

The overall score sets the tier.

The tier is what shapes the engagement: what kind of work is worth doing next, and what would be premature.

1.0 – 1.9
Foundational
Governance depends on individuals. Establish ownership and a baseline first.
2.0 – 2.9
Emerging
Practices exist but are inconsistent. Standardize what already happens.
3.0 – 3.9
Operational
Structured and repeatable. Integrate the domains and add measurement.
4.0 – 4.5
Advanced
Managed with metrics. Move to enterprise integration and strategic use of the data.
4.6 – 5.0
Optimized
Optimized and integrated. The work is holding the level through change.
The governance scorecard

What leadership receives.

A scorecard report produced from the assessment: overall score and tier, six domain scores, a governance heatmap, insights, priority domains, and a recommended roadmap with the services attached to it.

Overall TruMaturity score and governance tier
Domain maturity scores across all six domains
Governance heatmap for executive visibility
Key governance insights, including cross-domain dependencies
Priority governance areas, ranked
Recommended roadmap by quarter, with the services attached to each item
Overall TruMaturity™ score
2.8
Emerging tier
Cycle target
3.5
Cybersecurity
3.2 / 5.0
AI Governance
1.6 / 5.0
Risk Management
2.9 / 5.0
Compliance
3.4 / 5.0
Privacy
2.5 / 5.0
Data Governance
2.1 / 5.0
Current score
Cycle target
Illustrative figures, shown to demonstrate the format.
The full assessment

Scored against evidence, not self-report.

The assessment is conducted inside each domain’s Current State Assessment, so it can start in one domain and expand. Its scores are the baseline the roadmap, the budget conversation, and board reporting are measured against.

Engagement · Evidence-based

Full TruMaturity™ Assessment

Sixty questions, ten per domain, scored against documentation, stakeholder interviews, and control evidence. Conducted inside each domain's Current State Assessment and refreshed at each quarterly governance review.

60 questions · 10 per domain
Scored against documentation, interviews, and control evidence
Delivered within each domain’s Current State Assessment
Output: governance scorecard report, heatmap, priority areas, and a sequenced roadmap
Discuss an assessment
From score to roadmap

The score decides what kind of work comes next.

Recommendations follow the overall score, then get sequenced against the individual domain scores and the pressure the organization is under.

Below 2.0

Accelerator engagement

Establish ownership, a baseline, and a governance charter in the domain under the most pressure.

2.0 – 3.0

Baseline governance services

Current state assessment, governance framework and charter, and the core policy set in the weakest domains.

3.0 – 4.0

Operational integration services

Connect the domains so evidence, reporting, and review cadence are shared rather than duplicated.

Above 4.0

Strategic transformation programs

Enterprise governance architecture, quantified risk, and measurement that feeds decisions rather than reports.

See the services these map to →