KnowBe4 has released the KnowBe4 Program Maturity Assessment (PMA), a free, strategic tool designed to help IT and cybersecurity leaders measure and improve their organisation’s security culture.
As human actions are targeted and exploited by attackers with increased sophistication, organisations need clarity on what is working and how to measure improvement.
According to KnowBe4’s Security Culture: How-To Guide, security culture is one of the strongest predictors of secure behaviour, yet few organisations have the tools to assess and manage it effectively.
Created by security culture expert Perry Carpenter, the PMA offers a structured, practical self-assessment framework focused on Human Risk Management (HRM). Unlike technical assessments or consultant-heavy frameworks, the PMA delivers actionable insights across ten critical dimensions of security culture, without the jargon. It translates abstract cybersecurity concepts into concrete actions that organisations can take immediately, regardless of size or industry.
Key Features of the PMA:
- Holistic Evaluation: Examines leadership, employee behaviour and business process integration
- Objective Scoring: Provides clear, quantifiable results across 40 Culture Maturity Indicators (CMIs)
- Identify Gaps: Pinpoints exact areas of weakness, from employee mindset to executive communication
- Strategic Roadmap: Offers customised recommendations based on maturity level
- Actionable Next Steps: Delivers next steps to strengthen the human firewall
After completing the assessment, users receive a personalised maturity classification on a five-level scale, visual feedback across all dimensions, and prioritised recommendations.
Those looking to deepen their efforts can opt into a follow-up consultation to explore how the KnowBe4 HRM+ platform can accelerate maturity and build a lasting security culture.
“Every meaningful program requires clarity: clarity of purpose and clarity of impact. This is especially true with Human Risk Management programs where lack of clarity and impact will leave an organisation exposed in ways they may not appreciate,” said Perry Carpenter, chief human risk management strategist at KnowBe4. “Organisations need a way to demonstrate effectiveness of their human risk management program and show leadership its value.
“This is especially true when programs fail to account for the human element, employees whose everyday decisions significantly impact organisational security.
“The PMA offers a clear, data-driven approach that helps leaders identify key areas for improvement, allocate resources more effectively, and build a stronger, more resilient security culture.
“It’s about giving organisations the insight they need to make informed decisions and foster lasting cultural change.”
To read more Eskenzi news, click here.
