Control Maturity Assessment
ISO 27001 process overview
The control maturity assessment allows individual controls to be added to the organisation and assessed against a maturity model. This assessment allows weaknesses within controls to be identified and improvements against controls defined.

This assessment is used to calculate how vulnerable a resource is to a particular threat (highlighted blue within the 'Risk Diagram' above).