k-bailey/detection-engineering-maturity-matrix

detection-engineering-maturity-matrix's Issues

More detail wanted?

Hi, interesting idea of a detection maturity matrix.
Coming from the software development and testing background, I would like to point you to some other maturity matrices:

• TPI Next (https://www.tmap.net/building-blocks/test-process-improvement-tpi): also has 3 levels (controlled, efficient, optimizing) divided over 16 key areas grouped in 3 groups.
• TI4Agile (https://www.polteq.com/en/testservices/ti4agile/) (and others at Polteq), again with 3 levels and several key areas.

Don't know if you want to do that, but it might be useful to name the key areas. You already have the levels and the grouping. Your checkpoints only do not have a checkpoint yet.
Maybe you might want to have more detailed checkpoints for each key area.

Another point is the question if there are dependencies between the checkpoints you have identified?
A maturity matrix can be used to assess a current situation, but it can also be used as a guidelines to plan the improvements in a certain order.

Feel free to discuss further via email.