Skip to main content

      When cyber measures are rolled out without a clear baseline, protection stays piecemeal. The KPMG Cyber Maturity Assessment (CMA) is a comprehensive assessment of an organisation’s readiness to prevent, detect, contain and respond to threats to its information assets.

      The CMA looks beyond technical preparedness. It takes a rounded view of people, process and technology to show where you are vulnerable, which areas to prioritise and how to demonstrate corporate and regulatory compliance. The model is maintained by the KPMG network and updated for new developments such as AI security.

      The assessment is equally useful as a starting point for a new CISO, as input to a multi-year strategy, as preparation for a supervisory review, or as a periodic health check to show the Board how the programme is progressing.

      What we assess

      • Leadership and governance, including Board engagement and accountability
      • Human factors: culture, awareness and skills
      • Information risk management, including third parties
      • Business continuity, crisis management and recovery
      • Operations and technology, including identity, detection and response
      • Legal and regulatory compliance (DORA, NIS2, sector rules)

      Our approach

      • Scoping

        Agree focus areas, stakeholders and documentation

      • Assessment

        Self-assessment or guided interviews and workshops, supported by a central GRC tool, plus review of existing documentation

      • Analysis

        Current and target maturity per domain, set against risk appetite and peer benchmarks

      • Reporting

        Findings, underlying risks and recommendations, with a prioritised roadmap

      What you get

      • Board-ready maturity heatmap and executive summary
      • Gap register with evidence traceability from finding to source
      • Prioritised, costed roadmap and quick wins
      • Baseline for measuring progress and re-assessment over time

      KPMG methodology

      • KPMG CMA maturity model, used worldwide, with full coverage of ISO/IEC 27001 and NIST CSF 2.0 requirements
      • Benchmarking against peers from the KPMG global client base

      Contact

      Constantinos Gavardinas

      Partner, Advisory

      KPMG in Greece