Skip to main content
SAHM

This site uses cookies to improve your experience and analyze visits.

Accept all
Reject all (essential only)
Customize
Learn more about cookies
SAHM logo
  • Home
  • About
  • Pricing
  • Knowledge Hub
  • Support
  • Book a Meeting
  • Customer Portal
  • Employee Portal
  • Contact
Menu

Language

Services

Digital TransformationEnterprise ArchitectureNORA ComplianceEA Tool ImplementationPricing

Expertise

TOGAF FrameworkDGA NORAAvolution ABACUSIT Strategy

Company

About UsContact Us

Resources

Schedule ConsultationRequest DemoCustomer SupportSubmit Ticket

Legal

Privacy PolicyTerms of ServiceCookie PolicyAccessibilitySecurity Policy

Get in touch

info@sahm.sa+966 53 113 0434

2023 - 2026 © SAHM Information Technology. All Rights Reserved. | Riyadh, Saudi Arabia

Back to NORA

Capability Maturity Assessment

A five-level model for assessing business and technology capability maturity

The Guideline for Implementing the National Enterprise Architecture Methodology (DGA-1-2-5-230) defines a five-level model for capability maturity. The Business Architect applies it to business capabilities, and the Technology Architect applies the same model to technology capabilities and their sub-capabilities.

The five capability maturity levels

Where this page sits in NORA: Capability and Maturity Assessment (the Saudi NORA assessment tool, separate from the methodology guideline). Note: detailed NORA Maturity / Qiyas content will follow in a separate update.

In brief

  • Five levels, from sporadic execution to continuous measurement and improvement.
  • The same model covers business capabilities and technology capabilities, including their sub-capabilities.
  • Results map the current state and flag the maturity areas that need attention or enhancement.
The five capability maturity levels
LevelHeadingDescription
Level 1Not implemented, or executed sporadicallyThe lowest level. The capabilities under review are not implemented, or some are executed in an ad-hoc, irregular manner.
Level 2Documented and followed, without evidence of executionCapabilities at this level are documented and followed in most cases, but there is no documentation of outputs and no evidence of execution.
Level 3Documented and followed, with evidence of executionCapabilities at this level are documented and followed consistently, with documented evidence of execution.
Level 4Documented and followed, with indicators and targetsCapabilities at this level are documented and followed, with documented evidence of execution, and with defined indicators and targets to measure them.
Level 5Continuously measured and improvedThe highest level. Capabilities are documented, followed, and supported by documented evidence of execution. Indicators and targets are defined, and the capabilities are measured and improved on an ongoing basis.

Progression across the levels

Not implemented, or executed sporadically
Documented and followed, without evidence of execution
Documented and followed, with evidence of execution
Documented and followed, with indicators and targets
Continuously measured and improved
  • 5Maturity levels
  • Business & technologyCapabilities covered
  • DGAIssuing authority

Key insight

The Business Architect applies this model to business capabilities, and the Technology Architect applies the same model to technology capabilities and their sub-capabilities. The assessment runs from Level 1 (ad-hoc execution) to Level 5 (continuous measurement and improvement) and pinpoints the maturity areas that need attention or enhancement.

Related

Applying NORA

National Enterprise Architecture Methodology

Enterprise Architecture Governance

Capability Maturity Assessment | National EA Methodology | SAHM