# Governance maturity assessment

**Use it** to find where the organisation is before planning governance work, and again every six months. **Readers:** the BI lead, the COE, sponsors. Score each area from 1 to 5 (1 = no consistent practice, 3 = defined and mostly followed, 5 = measured and continuously improved), with evidence for each score.

| Area | Score (1–5) | Evidence | Next step |
|---|---|---|---|
| Ownership: every production item has an owner | | | |
| Certified models for key domains | | | |
| Agreed definitions for key metrics (KPI dictionary) | | | |
| Workspace strategy and naming | | | |
| Security: least privilege, groups, RLS tested | | | |
| Content lifecycle and retirement | | | |
| Deployment: Git, pipelines, environments | | | |
| Monitoring: refresh, capacity, usage | | | |
| Self-service enablement: training, templates, support | | | |
| Tenant settings reviewed and documented | | | |

## Summary

- **Strongest area:** <area>, because <evidence>.
- **Biggest risk:** <area>, because <evidence>.
- **Three actions for the next quarter,** each with an owner and a measurable outcome.