Security maturity is about effectiveness, not the use of security mechanisms to achieve arbitrary security levels....

This document is intended for asset owners and product suppliers who wish to improve the security...