Here we explain a bit about maturity models, look at how they’ve been used for cyber security, and explain why the NCSC is no longer supporting the IA Maturity Model (IAMM) introduced in 2008.