Knowledge

    IT maturity check

    Rate 24 statements about your IT. It takes about ten minutes. You get an immediate result per field and an assessment of where the biggest lever sits. No data is stored or transmitted, the evaluation runs in your browser.

    Answer as things are today, not as they are planned. The check is for you, not for us.

    0 of 24 statements rated

    1. IT Strategy and Steering

    There is a written IT strategy derived from business goals and reviewed annually.
    We know what share of our IT budget goes into maintaining what exists and what share into change.
    For every IT initiative it is justified why it comes before the others.

    2. Architecture and Applications

    There is a current overview of all applications with process, business owner and contract end.
    For every central data object it is defined which system is authoritative.
    For systems without vendor support there is a dated retirement plan.

    3. Build and Buy

    Requirements come from processes and are worded so that their fulfilment can be tested.
    Vendors are compared using our own script and our own data, not through open presentations.
    There is a fast approval route for new tools that the departments actually use.

    4. Rollout and Change

    Data migrations begin with an analysis of data quality before the date is fixed.
    After every go-live we measure who uses the new way and act on the result.
    Changes to productive systems are tested, approved and documented.

    5. Operations and Support

    All support requests are recorded, including those made in passing, and analysed monthly.
    Every critical task in IT operations has a trained deputy.
    We notice incidents on critical systems through monitoring before users call.

    6. Data and Information

    The twenty most important metrics are defined consistently and calculated the same way everywhere.
    Central master data has a responsible person in the department and measured quality.
    Documents are stored so they can be found by content and meet retention obligations.

    7. Security and Resilience

    We have checked on the record whether we fall under the German NIS2 implementation act.
    Recovery of the most important systems was successfully tested in the last twelve months.
    Multi-factor authentication is active on everything reachable from outside and on all administrator accounts.

    8. IT Governance and Compliance

    There is a register of IT related obligations with owners, deadlines and evidence.
    All AI features in use are recorded and classified under the AI Act.
    Licence holdings and actual usage are reconciled at least annually.
    Please rate all statements.