ISO/DIS 37014 · stage 40.60 Close of voting Ballot closed 10 June 2026 Planning date 15 Sep 2027, our estimate Official record
37014ISO 37014 Revision CheckerGroup governance maturity, before publication

All 35 requirements · Governance maturity measurement framework

Model requirement 5.4.5

Governance maturity scale

What ISO 37004:2023 asks at 5.4.5, in our own words, and how it reads inside a controlled group. The draft's public contents heading for it is 5.4 Measurement scale.

01The requirement

What the model asks

The maturity with which a principle is applied is expressed across the three aspects, consolidated in Table 6 and described per level: level 0 undefined, the principle not adopted or applied, any practices found not intentionally used for it; level 1 limited, adopted but the body cannot explain why it matters and not all necessary components adopted; level 2 emerging, adopted but the body cannot succinctly explain how practices apply it, practices used inconsistently, component types missing and components not widely communicated or understood; level 3 formalized, formally adopted with the body able to explain how it is applied, but practices not assessed and components not reviewed; level 4 measured, maturity measured, sufficient resources ensured, the body able to describe the principle's purpose and receiving stakeholder feedback on its achievement, all required components adopted, communicated and implemented, practices assessed and reported, components reviewed and corrected; level 5 optimizing, the body committed to continually improving its governance and the application of the principle, with its activities ensuring that application continually improves.

02In a controlled group

What it means when one board controls another

The consolidated level should be reported per principle and per entity, not only for the group. A group average of 3 can sit on one entity at 0 and another at 5. The draft treats outliers as information, and in a controlled group the outlier is often the entity with the least autonomy.

03What to record

Evidence an evaluator asks for

A maturity rating is a claim about how the group governs. The evidence is what proves it operated. Keep both, and keep them together.

  • Maturity scale: Consolidated maturity level per principle derived from the three aspect ratings
04Gaps

Where evaluations commonly find gaps

  • Levels assigned without the per-aspect evidence behind them
05How it is rated

How this requirement enters the rating

This unit governs the instrument. The scale must be fixed before the ratings, the level labels must be the published ones, and the aspect-specific descriptions must be used for the aspect being rated. The six levels are on /scale/.

It carries 1 evidence item and 1 common gap in the model. One item is enough only if it is the artefact that proves the practice operated, not a policy that says it should. The group application on this page is ours; the requirement and evidence are the model's, stated in our own words.

06Read next
07Source

Source for this page

Retrieved 2026-10-21. The requirement above is our statement of the clause in our own words; the official text is linked so you can check it.

Note on the draft: The requirement, evidence and gaps on this page are read from ISO 37004:2023, which the draft states it builds on. The draft's own clause body is not public, so this page does not state it. The clause reference at the top is the draft's public contents heading that this requirement sits under.

The maturity kit, USD 299 one off. The 35-requirement register, the 54-cell maturity worksheet, the evidence list and a dated plan, as PDF, CSV and XLSX.

See the kit Open the free specimen