Capability isn't mature because someone says it is.
CCMM uses five maturity levels, and each one is gated by evidence of organizational behaviour rather than by assertion, intent or documentation.
- 1DependentCarried by individuals
The capability is primarily carried by individual expertise, relationships or intervention. Remove the person and the capability leaves with them.
Evidence gate: outcomes can be traced to specific individuals rather than to a mechanism.
- 2EmergingMechanism exists, incomplete
A recurring mechanism exists, but ownership, consistency or coverage remains incomplete. It works in parts of the organization and not others.
Evidence gate: a repeating mechanism can be shown, but not consistent ownership or coverage.
- 3EmbeddedDefined, owned, repeatable
The capability is defined, owned, accessible and repeatable without dependence on one person. New people can perform it.
Evidence gate: a named owner, an accessible way of working, and repeatability across people.
- 4ManagedMeasured and improved
Performance of the capability is measured, reviewed and acted upon, with demonstrated improvement over time.
Evidence gate: a management cadence that changes decisions, plus evidence of improvement.
- 5AdaptiveLearns and evolves
The organization learns, anticipates change and deliberately evolves the capability itself as strategy, markets and technology shift.
Evidence gate: deliberate, evidenced changes to the capability in response to anticipated change.
Most maturity claims fail at the evidence gate.
- Documentation isn't capability.
- A dashboard isn't management.
- An experienced executive isn't institutional capability.
- AI automation isn't adaptive capability.
Evidence separates organizational behaviour from assertion. That distinction is what makes a capability read defensible rather than optimistic.
The question isn't "how mature are you?"
It is: how capable do you need to be for what you're trying to achieve?
What the organization can demonstrably do today, at capability level, supported by evidence.
The level of capability this organization actually needs, given its strategy, ambition, change intensity and context.
CCMM separates the two because there is no universal definition of "good." A company pursuing stable organic growth does not necessarily need the same capabilities as one entering a major transformation, international expansion or a private-equity value creation plan.
So the system doesn't tell you "you're Level 2." It asks: given your strategic ambition and context, where is your capability insufficient for what you're trying to achieve?
That is also why peer benchmarking is secondary. Comparison is informative; the strategic requirement is decisive.
How diagnosis works →What capability is holding back your growth?
Your business problem may appear to be revenue, sales, margin, retention or growth. The root constraint may be somewhere else. Find out what capability your organization needs to build next.