Skip to content

co-cddo/cloudmaturity

Repository files navigation

Cloud Maturity Model and Assessment Tool

CI CodeQL OpenSSF Scorecard OpenSSF Best Practices GitHub License GitHub deployments

A self-assessment tool that helps organisations understand their cloud maturity and provides targeted, actionable guidance for improvement.

Screenshot from report page

Overview

The Cloud Maturity Model provides a structured way to evaluate your organisation's cloud capabilities across multiple dimensions. Rather than producing a simple score, it delivers contextual guidance that respects the principle of proportionality—what's appropriate for a critical national service differs from what's needed for a departmental intranet.

This project is currently in alpha. Contributions are very welcome.

How It Works

The Assessment

Each question presents five attestation levels, ranging from minimal capability to best practice. You select the statement that best describes your current state.

The intent is not to push everyone toward the highest level. Scoring "low" isn't necessarily bad—in fact, scoring too "high" might indicate over-engineering for your context. A highly resilient, zero-trust architecture makes sense for passport validation services but would be disproportionate for publishing the canteen menu.

The Report

Based on your attestations, the report helps you:

  1. Understand if your current state is appropriate for your risk profile and service criticality
  2. Get explicit, targeted guidance on how to reach the next level when improvement is warranted

What This Tool Is Not

This is not an assurance or compliance tool. Results are not collected or reported centrally. It exists solely to help organisations:

  • Recognise where they are
  • Understand what risks they're operating with
  • Learn specifically how to improve their position

Getting Started

Prerequisites

  • Node.js 20+
  • npm

Local Development

# Install dependencies
npm install

# Start the development server
npm start

Then open http://localhost:8080 in your browser.

Running Tests

npm test

Contributing

Contributions are welcome! The repository is configured with dev containers, so you can use GitHub Codespaces or any compatible editor.

Adding or Modifying Questions

All questions and guidance live in ./src/assessment. Each question is a markdown file with the following structure:

---
title: Question Title
tags: category
eleventyNavigation:
  parent: category
---

### Answer 1

#### **How to determine if this good enough**

Guidance text...

#### **How to do better**

Improvement guidance...

### Answer 2

...and so on through Answer 5

Simply add a new file to create a new question, or modify existing ones as needed.

Tech Stack

Licence

MIT

About

Cloud Maturity Model and Assessment tool.

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Releases

No releases published

Contributors 7