For a long time, I wanted to write a blog post talking about how the software development and cybersecurity world have matured over the years.

In this blog post, I will share my insights from organizations I came across in both the SDLC and cybersecurity domains.

Although traditionally you can break the maturity levels into 5 levels, I decided to make things simpler and break them into 3 levels (from ad-hoc to fully optimized). You can look at the various levels and figure out where your organization is on the scale.

Level 1 – Reactive

The initial level is considered the lowest maturity.