« Human factors in secu… | Home | TED talks »

Measuring Enterprise Architecture Maturity



Capability Maturity Models (CMMs) are used to measure the maturity of organisations in various ways.

There are CMMs for software engineering, system engineering, project management, software maintenance, risk management, system acquisition, information technology (IT), services, business processes generally, and human capital management. Because several CMMs are used in an organisation a more overall CMM was created, called Capability Maturity Model Integration (CMMI), providing a general maturity level to an organisation. The terms CMM and CMMI are developed by the Carnegie Mellon University. CMMs usually have 5 levels:

  1. Initial
  2. Repeatable
  3. Defined
  4. Managed
  5. Optimized

When looking for a maturity model for enterprise architecture, I found several architectural CMMs:

All of these provide a matrix that describes levels of maturity and the topics to measure the maturity. I found the E2AMM matrix the most useful. Using the matrix provided architects can value their maturity and find what measures must be taken to improve the maturity of their enterprise architecture organisation.

It is not uncommon to have various levels of maturity on the topics when the matrix is filled in. A consistent maturity level over all topics in the future is not needed as well. Enterprises can decide to value some topics as more important than others. They can for example decide to have a generic maturity level of 3 for all topics, but maturity level 4 for some that are found most important.

It would be an interesting exersise to fill-in the E2AMM maturity matrix (or one of the other ones if you like) for your own organisation, just to see where you are and what could be enhanced.



No comments:


About Sjaak Laan

Sjaak Laan

I am 45 years old and married with Angelina. We have 3 children of 12, 7 and 5 years old. We live in The Netherlands, in a place called Drachten

I work for Logica as Principal IT Architect. I have 20 years IT experience.

I own the following certificates:

ITAC Master Certified IT Architect

CISSP_logo CISSP (Certified Information Systems Security Professional)


TOGAF8_Certified_web TOGAF Certified Architect



I am a member of the:


I manage my business contacts using Linkedin.


I can be reached through sjaak.laan [ a t ] gmail [dot] com.

This site states my opinion only, and not nessecarily the opinion of my employer or of the clients I work for.