Security Maturity Assessment and Evaluation for a Critical Infrastructure Risk Management Program — A Practical Guide

This course introduces participants to the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® (the Model) – a structured, evidence-based methodology aligned with the Security of Critical Infrastructure Act 2018 (the SOCI Act) and the Security of Critical Infrastructure (Critical Infrastructure Risk Management Program) Rules 2023 (the CIRMP Rules).

Designed for professionals responsible for implementing, evaluating, or reporting on CIRMP obligations, the course provides a practical guide to understanding maturity principles, evaluating implementation across the eight CIRMP maturity assessment categories, and preparing governance-ready outputs to support continuous improvement and regulatory engagement.

Participants will gain access to editable Assessment Templates and Guides that are aligned with the 59 Baseline CIRMP assessment obligations and four maturity levels – to support structured self assessment, evidence recording, and executive reporting.

Included With This Course

Participants receive the Model, including:

• Baseline Edition — Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Word Template
• Baseline Edition — Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Excel Workbook
• Baseline Edition — Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Practical Application and User Guide
• Baseline Edition — Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® — Workbook Administration and Maintenance Guide.

By the end of this course, participants will be able to:

1. Understand the role of maturity in CIRMP implementation: Explain how structured maturity assessment supports regulatory defensibility, governance assurance, and uplift planning.

2. Explore the Model: Understand the structure of the Model, including four maturity levels and alignment with eight CIRMP maturity assessment categories.

3. Interpret CIRMP obligations through a maturity lens: Map CIRMP requirements to indicators of implementation maturity and differentiate expectations across obligation types.

4. Use the editable Maturity Assessment and Evaluation Template: Apply the provided template to assess organisational capability, document supporting evidence, and record maturity ratings.

5. Prepare actionable outputs for Boards and stakeholders: Translate maturity results into dashboards, heatmaps, and summaries for executive briefings and attestation.

After completing this course, participants will be able to:

1. Describe the principles of CIRMP maturity: Explain how maturity assessments strengthen resilience, support compliance assurance, and inform strategic decisions.

2. Apply the Model: Assess current practices across cyber, personnel, supply chain, physical security, governance, and more using a consistent framework.

3. Document evidence and identify maturity gaps: Use the editable template to evaluate and record implementation maturity against each of the 59 Baseline CIRMP assessment obligations.

4. Develop governance-ready outputs: Generate visual tools and written summaries to communicate maturity to senior leadership and the regulator.

5. Plan and prioritise improvement: Use assessment results to target areas for uplift, aligned with risk appetite, business priorities, and compliance timelines.

Private Coaching Session: Includes a one-hour private coaching session with the Pentagram Advisory team. During this session, we will provide tailored, practical advice specific to your organisation’s needs. Whether you’re preparing for your first CIRMP maturity assessment and evaluation, refining your internal evaluation approach, or seeking guidance on interpreting and presenting maturity results to Boards or regulators, this session is designed to help you apply the Pentagram Advisory CIRMP Maturity Assessment and Evaluation Model® with confidence.