Self-assessment
This model does not embed its own assessment engine. To measure how your environment aligns with the maturity model, it points to the AWS Security Maturity Model Assessment Tool — a dedicated app for running a structured self-assessment against the model.
Security Maturity Model Assessment Tool
The assessment tool lets you work through the model's controls and record where you stand on each one — not started, in progress, implemented, not applicable, or risk accepted. It rolls your answers up into adoption scores by phase so you can see your overall posture and what to tackle next. Your assessment data stays in your browser and can be exported to a file to back it up or share it, so nothing sensitive leaves your machine.
How this model uses the tool
Use this maturity model to understand each control — the threat it addresses, the AWS service to use, and how to validate it — and use the assessment tool to track your adoption of those controls over time. The model is the guidance; the tool is where you measure and prove your progress against it.