Radar Chart for Cybersecurity Maturity — NIST CSF 2.0 & CIS Audit
A cybersecurity maturity radar chart plots current CISO audit scores against target compliance levels across the six NIST Cybersecurity Framework domains ($0\text{–}100$ or CMMI $1\text{–}5$ scaled).
Tip: Paste Excel or Google Sheets rows (Ctrl+V / ⌘V) directly into any cell.
| # | Label | |||
|---|---|---|---|---|
| 1 | ||||
| 2 | ||||
| 3 | ||||
| 4 | ||||
| 5 | ||||
| 6 |
Domain remediation gap: Gap_j = Target_j - Current_j. Overall NIST CSF Maturity Index = mean(Current_j).
Chart Design & Use-Case Tips
- 01Domain remediation gap: Gap_j = Target_j - Current_j. Overall NIST CSF Maturity Index = mean(Current_j).
- 02The 6 NIST CSF 2.0 functions (Govern, Identify, Protect, Detect, Respond, Recover) form a natural hexagon on the radar chart.
- 03Compare Current Posture (Series A) vs. Target Roadmap Posture (Series B) and Prior-Year Posture (Series C) for audit committee briefings.
- 04Scale CMMI 1–5 maturity tiers by multiplying by 20 (Tier 1 = 20, Tier 3 = 60, Tier 4 = 80, Tier 5 = 100).
Frequently Asked Questions
Why is a hexagon radar the industry standard for NIST CSF 2.0?+
NIST CSF 2.0 defines exactly 6 core security functions (Govern, Identify, Protect, Detect, Respond, Recover), which map 1-to-1 onto a 6-axis hexagonal spider chart.
How do I convert CMMI 1–5 scores onto this chart?+
Either enter 1 to 5 directly (the radar auto-scales to your max value) or multiply by 20 to express scores on a 0–100 percentage scale.
How many maturity pillars work best on a radar chart?+
Five to eight dimensions give the clearest polygon shape; beyond ten spokes, a horizontal bar chart becomes easier to scan.