Ever since the first incarnations of maturity models, critics have voiced several concerns with
these frameworks. Indeed, a lack of model fit and oversimplification of the real world can be
attributed to the rigidity of these models, which assumes that each organization that uses the
framework is equal. This research investigates this fundamental rigidity from an analytics
perspective, analysing in casu a focus area maturity matrix targeted at information security.
The results show that organizational characteristics influence the maturity framework both in …