What cloud and operational maturity is.
Cloud maturity measures how well an organization can operate, evolve and protect its cloud workloads with predictability: reproducible infrastructure, automated delivery, measured reliability, useful observability and costs under clear ownership.
The assessment covers eight domains inspired by Well-Architected, DORA, SRE and the FinOps Framework, and works for AWS, Azure, GCP, multi-cloud, hybrid and for those still planning their migration: the questions adapt to your stage.
Eight domains, one broad view.
Each domain gets a score from 0 to 100 and a maturity level, showing where improvement pays off most.
01
Cloud Strategy and Governance
Strategy, responsibilities, account organization and standards that support cloud usage.
02
Architecture and Platform
Availability, scalability and appropriate use of managed services and platforms.
03
Infrastructure as Code and Automation
How much of the infrastructure is described as code, versioned and reproducible, and how changes are controlled.
04
DevOps and Software Delivery
Delivery pipelines, automated testing, deployment frequency and the ability to roll back changes.
05
SRE and Reliability
Reliability objectives, incident management, post-incident learning and disaster recovery.
06
Observability and Operations
The ability to understand what is happening in production: logs, metrics, traces and useful alerts.
07
FinOps and Efficiency
Visibility, accountability and optimization of cloud costs by product and team.
08
Cloud Security and Resilience
Whether the cloud platform is built and operated securely: identities, secrets, backup and recovery.
How the score is calculated.
Each answer is worth 0 to 4 on the maturity ladder. The domain score is a weighted average normalized to 0 to 100, and the overall score combines the domains that apply to your context.
- Level 1Initial0 to 24Reactive, informal practices that depend on individuals and have little standardization.
- Level 2Basic25 to 44Practices exist, but execution is inconsistent, with little automation and limited governance.
- Level 3Structured45 to 64Defined processes, clear roles and predictable execution, with known controls.
- Level 4Managed65 to 84Metrics, automation and governance in use, with systematic improvement.
- Level 5Optimized85 to 100Data-driven decisions and continuous optimization, with a high level of automation.
"I don't know" answers are not scored as zero: they lower the answer completeness and indicate low visibility, which is a finding in itself. Some answers generate declared critical points regardless of the average.
Methodology cloud-v1.0 is guided by AWS Well-Architected Framework, Cloud Adoption Frameworks, DORA metrics, SRE practices and the FinOps Framework, used as a conceptual reference, without literal reproduction. The result does not indicate compliance with any of these frameworks.
This is a self-assessment based on the answers provided and is indicative only. It does not replace an audit, pentest, technical assessment, certification or independent validation of controls.
// Free self-assessment
How the organization believes it is doing
Based on your answers, it delivers a first view of gaps and priorities in minutes.
// FFTech technical assessment
What the evidence shows
Specialists analyze your environment and evidence, with a validated roadmap.
Learn about the Cloud Security Assessment