

- Description
- A construction site and its cranes
- Source
- Fons Heijnsbroek · original page
- Licence
- CC0 Public domain
Maturity Matrix — IT Project Management (PI)
This matrix measures how an IT project is steered: scoped, governed, planned, protected from risk, carried by a team, communicated, delivered, and made profitable.
In brief
- This matrix measures how an IT project is steered: scoped, governed, planned, protected from risk, carried by a team, communicated, delivered, and made profitable.
- It is read across 11 themes and 5 levels; each level is a promise (an observable outcome) supported by verifiable milestones.
- It does not say how to do it (Scrum, predictive, hybrid...): it says what you get. The means are in Project Management and Tools.
- It differs from the three other matrices: here, steering, governance, and the human factor; code engineering is in Software Development, data as an asset in Data Project Management, BI product in BI Development.
Level: 🟢→🔴
Domain promise#
A mature IT project delivers what has value, at a cost and pace that were announced, without exhausting its team, without unpleasant surprises for those funding it, and while learning from each experience.
At level 1, this promise is random: everything depends on a few people and luck. At level 5, it becomes a system property: gaps are detected before they become costly, value is measured after delivery rather than assumed, and the organization corrects its own rules. Level 5 is intentionally very difficult to fully reach (see limits).
Audience and usage#
| Audience | Typical usage |
|---|---|
| Project manager, product owner | Place your project, choose two or three themes to improve this half-year |
| Sponsor, leadership, PMO | Compare projects on the same scale, identify systematically weak themes |
| Experienced BI/datamart developer training juniors | Have a common language: “we are at 2 in risk, let's target 3” |
| Auditor, quality | Verify through evidence (“Verifiable evidence” column) rather than statements |
Recommended usage: one self-assessment per project, in a half-day workshop, supported by evidence (see self-assessment and RATING), repeated every 6 to 12 months. The matrix is used to decide where to invest, not to rank people.
Scope#
In scope: end-to-end steering of an IT project or product, from idea to measured benefit; team, decision-making, communication, delivery quality, and value practices.
Out of scope (covered elsewhere, with cross-references):
- internal code quality, automated testing, continuous integration, architecture → Software Development;
- data quality, catalog, data governance, GDPR on data → Data Project Management;
- semantic model, DAX, RLS, Power BI reporting → BI Development;
- project portfolio management, corporate strategy, and public procurement (not covered);
- choosing a specific tool (see overview of planning tools).
The themes “Quality and Acceptance” and “Delivery” cover only the steering point of view (acceptance criteria, production release decision, change management); their technical counterpart is in the DL matrix.
The 11 themes and their codes#
| No. | Code | Theme | In one sentence |
|---|---|---|---|
| 01 | CAD |
Scoping and Vision | Know why the project is being done, for whom, and what “success” means. |
| 02 | GOU |
Governance and Steering | Decide quickly and at the right level, with reliable information on the real status. |
| 03 | PLA |
Planning and Estimation | Announce dates and workloads whose reliability is known. |
| 04 | PER |
Scope and Requirements Management | Control what comes in, goes out, and changes, without absurd freeze or drift. |
| 05 | RSK |
Risk Management | See problems coming and act before they cost. |
| 06 | EQU |
Team and Collaboration | A team that coordinates, sustains over time, and does not depend on one hero. |
| 07 | PAR |
Stakeholders and Communication | Everyone receives the right information, and no one is surprised. |
| 08 | QUA |
Quality and Acceptance | What is delivered is accepted against criteria known in advance. |
| 09 | LIV |
Delivery and Production Release | Deliver frequently, calmly, with rollback available. |
| 10 | AMC |
Continuous Improvement and Learning | Turn every incident and every project into a rule that improves. |
| 11 | VAL |
Budget, Value, and Benefits | Steer costs and verify that promised value is achieved. |
Milestone identifiers follow the pattern PI-<THÈME>-<level>.<n>, for example PI-RSK-3.2: second milestone of level 3 of the risk theme.
Theme × level summary table#
| Theme | 1 — Ad hoc | 2 — Repeatable | 3 — Defined | 4 — Measured | 5 — Optimized |
|---|---|---|---|---|---|
| CAD | oral idea, fuzzy goal | written objective per project | vision, scope, and success criteria validated | quantified go/no-go decisions | portfolio arbitrated, stops owned |
| GOU | decisions made on the fly | regular follow-up meetings | bodies, roles, escalation thresholds | gaps detected and handled within one week | governance adapted to risk and streamlined |
| PLA | imposed dates | plan with milestones | team-based estimation, explicit buffers | forecast reliability known | reliable probabilistic forecasting |
| PER | requests by email | request list | prioritized backlog, tracked changes | scope drift measured | scope steered by value |
| RSK | we react to crises | risk list | living register, owners, plans | exposure tracked, realized risks analyzed | risks integrated into decisions |
| EQU | isolated heroes | roles known | rituals, sustainable workload | team health measured | autonomous teams, bus factor ≥ 3 |
| PAR | information on request | regular check-ins | communication plan and mapping | satisfaction measured | trust, zero surprises |
| QUA | acceptance testing at the end | acceptance test plan | acceptance criteria in advance | escaped defects measured | quality steered by prevention |
| LIV | risky manual delivery | written procedure | regular cadence, rollback planned | lead times and failures measured | continuous delivery without event |
| AMC | no lessons learned | retrospective sometimes | actions tracked | action effectiveness measured | the organization learns and simplifies |
| VAL | cost discovered at the end | initial budget | tracked budget and declared value | value measured after delivery | investment steered by actual return |
Rating rule#
Common rule for all matrices (quoted identically):
each milestone has progress 0 / 0.5 / 1. A level N is achieved if the average progress of all milestones in levels 1 to N is ≥ 0.8 and no milestone is at 0. Theme score = N_achieved + average progress of milestones at level N_achieved+1 × 0.99 (e.g., 2.4). Matrix score = weighted average of themes (default weight 1, adjustable). An integer score of 5.0 is exceptional and may never be reached: that is not a failure.
Practical guidance: assign 1 only with evidence produced during the discussion (document, dashboard, ticket); assign 0.5 when the practice exists but is neither consistent nor verified; increase weighting for themes where the organization takes the most risk (example: RSK ×2 on a regulatory project).
Reading scores#
| Score | What the range says (without moral judgment) |
|---|---|
| 0–1 | The outcome depends on people and circumstances. Normal for a small team, a prototype, or a startup phase. |
| 1–2 | Habits exist but are neither written nor shared. Losing a key person is costly. |
| 2–3 | Practices are repeatable within the team. Outcomes are sound under normal conditions. |
| 3–4 | Practices are defined at the organization level and monitored with metrics. Gaps are seen early. |
| 4–5 | The system improves itself. High maintenance cost: justified only when stakes require it. |
A high score is not a universal objective. A three-month, two-person project has no reason to target 4 in governance; targeting the sufficient level for risk and size is a sign of maturity.
Entry Points and Dependencies#
Where to start (high gain, moderate effort):
CAD: without a goal and success criteria, everything else optimizes the wrong thing.PER: a single prioritized backlog immediately reduces confusion.RSK: a short register, reviewed every week, pays off quickly.PAR: a regular check-in and a status page prevent most surprises.
Dependencies (read as “A before B”):
CAD ─► PER ─► PLA ─► GOU ─► VAL
│ │ ▲
│ └──► QUA ─► LIV│
├──► PAR ─────────────┘
└──► RSK ─► GOU
EQU (foundation for everything) ─► AMC (feeds all themes)
- Reliable
PLAassumes controlledPER: you cannot plan what changes without a trace. LIVat level 4–5 assumesQUAat level 3 at minimum; the technical part is in Continuous Integration and Delivery.VALat level 4 assumesCADat level 3 (without success criteria, there is no value to measure).AMCis a multiplier: without it, no other theme improves sustainably.
Typical Organization Profiles#
Plausible scores by theme, for illustration (contextual assessments, not standards).
| Profile | CAD | GOU | PLA | PER | RSK | EQU | PAR | QUA | LIV | AMC | VAL | Average |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Small “craft-style” BI team, 2–4 people, reports for management | 1,6 | 1,2 | 1,0 | 1,8 | 0,8 | 2,2 | 1,8 | 1,4 | 1,2 | 1,0 | 0,6 | 1,3 |
| SFA/datamart product team, 8–12 people, release kits, TFVC | 2,6 | 2,4 | 2,2 | 2,8 | 2,0 | 2,8 | 2,4 | 2,6 | 2,4 | 1,8 | 1,4 | 2,3 |
| IT department of a mid-sized company, multiple projects, PMO | 3,2 | 3,6 | 3,0 | 3,0 | 3,2 | 2,4 | 3,2 | 2,8 | 3,0 | 2,0 | 2,6 | 2,9 |
| Highly regulated organization (healthcare, finance) | 3,6 | 4,0 | 3,2 | 3,6 | 4,0 | 2,6 | 3,4 | 3,8 | 3,2 | 2,4 | 3,0 | 3,3 |
| Vendor with a mature product, continuous delivery | 3,4 | 3,0 | 3,6 | 3,2 | 2,8 | 3,8 | 3,0 | 3,4 | 4,2 | 3,8 | 3,2 | 3,4 |
These profiles mainly show that strengths are uneven: the regulated organization excels at risk but learns slowly; the vendor ships fast but provides less structure. A useful matrix makes these imbalances visible.
Matrix Limitations#
- It measures observable practices, not project success. A project can succeed with a low score (luck, exceptional team) or fail with a high score (shifting market).
- Goodhart’s law: as soon as a milestone becomes a target, it gets optimized without being achieved. Each theme lists its gaming pitfalls; evaluation through cross-checked evidence (documents and interviews) limits them.
- Numeric thresholds are reference points, not standards: they depend on size, sector, and risk.
- Level 5 is partially theoretical: it is used to show the promise and encourage progress.
- The themes are not independent (see dependencies); an isolated high score on a downstream theme from a weak upstream theme is suspicious.
- Residual subjectivity: two evaluators may differ by half a point on a milestone; this is acceptable if evaluation is always done the same way and compared against oneself over time.
- Volatile data (tools, versions): see content files, status 2026-10.
See Also#
- Other matrices: Software Development · Data Project Management · BI Development · Matrix Index · Self-Assessment with Maturity Matrices.
- Methods that teach practice: Project Management Fundamentals · Scrum Framework · Predictive Methods · Choosing and Hybridizing Methods · Project Management Pitfalls and Best Practices (Cross-Cutting Summary) · AI for Project Management (General, Then Data).
- Tools: Azure DevOps / TFS · Project Metrics and Reporting.
- Reading the rating: RATING · Glossary · Reading Paths.
Next: 01 — Scoping and Vision →
✻ Written by Claude Sonnet 5.5