Francisco Quintero ← Back to portfolio
KAIROS methodology

KAIROS maturity model

A map to know where an organization stands and how to move forward, across business, people and technology. It does not measure technology alone, it measures capabilities, resources, value and direction.

The five levels

From scattered to self-sustaining

Every dimension of an organization sits at one of five levels. Progress runs from level 1, where nothing is defined, to level 5, where the capability is part of the culture and sustains itself.

1

Initial Level 1

Everything starts loose and driven by urgency. Nothing is defined.

2

Developing Level 2

There are attempts and goodwill, but they live in only a few hands.

3

Defined Level 3

It is written down, with clear owners and processes.

4

Managed Level 4

It is measured, reviewed and improved proactively.

5

Optimized Level 5

It is part of the culture and sustains itself, with real-time data.

How it is applied

The six phases are the engine

The levels tell you where you are. The six KAIROS phases are the engine that moves an organization from one level to the next, dimension by dimension.

KnowAssessIdeateRoadmapOrchestrateSustain

Know and Assess measure the current level in each dimension. Ideate and Roadmap set the target level and the path, prioritized by value and effort. Orchestrate executes. Sustain measures again and holds the gain.

The cycle repeats. Each pass climbs one or more rungs in the dimensions that deliver the most value first.

The ten dimensions

Three pillars, one complete reading

Maturity is read across three pillars. Each pillar brings together concrete dimensions, and each dimension describes what you see at each of the five levels.

01

Business

The direction, the value and the rules of the game.

Strategy and direction

Measures whether there is a clear, shared direction rather than scattered initiatives.

1 Initial

Initiatives start loose, driven by urgency. There is no stated direction.

2 Developing

A vision exists, but it lives in a few heads and does not reach daily work.

3 Defined

There is a written strategy, with objectives and a sponsor who backs it.

4 Managed

The strategy guides each area's decisions and is reviewed on a regular basis.

5 Optimized

Direction is part of the culture. Every relevant decision is measured against it.

Business value

Measures whether the real contribution of initiatives is quantified.

1 Initial

Value is not assessed. Decisions are made on intuition or trend.

2 Developing

Business cases are understood, but they are not measured or reviewed.

3 Defined

There are defined indicators, reported and compared against targets. Work is prioritized by value.

4 Managed

Value is measured before and after, with hard data, and direction is adjusted from it.

5 Optimized

The value of each initiative is visible to leadership in real time and guides investment.

Governance and prioritization

Measures how it is decided what gets done and who can do what.

1 Initial

Anyone does anything, without rules or control.

2 Developing

Owners are assigned and there is some visibility of what exists.

3 Defined

There are clear policies, a process to request and prioritize, and usage monitoring.

4 Managed

Duplicated or abandoned resources are detected and put in order. Governance is proactive.

5 Optimized

Governance is automated, with risk-based approvals, without slowing the pace down.

02

People

The culture, the talent and the human backbone.

Culture and adoption

Measures whether people actually use what gets implemented.

1 Initial

Tools are rolled out and left unused. Adoption is not managed.

2 Developing

There are one-off adoption efforts and a few internal champions.

3 Defined

There is onboarding for new users and an adoption strategy.

4 Managed

There is a community of champions, regular touchpoints and shared success stories.

5 Optimized

A large, proven internal community, with mentors and a growth path.

Capabilities and talent

Measures whether the knowledge and roles to sustain it exist.

1 Initial

Knowledge lives in one or two people. If they leave, it collapses.

2 Developing

Cases are piloted with technical teams, but without a training plan.

3 Defined

There is a training strategy and defined roles for the key areas.

4 Managed

Mixed teams, business and technical, plan and execute together.

5 Optimized

Teams form themselves as the need arises, with a shared development strategy.

Support and continuity

Measures what happens when something fails or has to be maintained over time.

1 Initial

Everyone fends for themselves. There is no support or lifecycle process.

2 Developing

Informal support and some management of the solution lifecycle.

3 Defined

Support involves a help desk, with risk profiles per solution.

4 Managed

A dedicated support team, clear roles and continuous improvement aligned to the business.

5 Optimized

Support activities are automated and operating responsibilities are fully understood.

03

Technology

The systems, the data, the security and the automation.

Architecture and systems

Measures whether the systems are in order and talk to each other.

1 Initial

Disconnected systems, with manual re-entry of data between them.

2 Developing

Some integrations, but without a standard or a defined lifecycle.

3 Defined

An environment and lifecycle strategy, with orderly deployments.

4 Managed

Environments per use case, automated deployments and deliberate architecture.

5 Optimized

Enterprise architecture that builds these capabilities into every decision.

Data and integration

Measures whether decisions are made with reliable data.

1 Initial

Scattered data, no single source. Decisions are made on intuition.

2 Developing

Isolated reports are looked at when there is time to build them.

3 Defined

A single source and data that support key decisions with some regularity.

4 Managed

Common data models that allow reuse and comparison across areas.

5 Optimized

End-to-end analytics and dashboards that give leadership real-time visibility.

Security

Measures whether the operation and the information are protected.

1 Initial

Basic security, no data policies or monitoring. Compliance is not understood.

2 Developing

Default controls configured and teams starting to define a strategy.

3 Defined

A data policy for every environment and regular review of recommendations.

4 Managed

Fine-grained access control, proactive monitoring and threat detection.

5 Optimized

End-to-end identity and data management, with security by design in every project.

Automation and responsible AI

Measures whether work is automated and AI is used with judgment.

1 Initial

Manual, one-off processes. AI with no governance or awareness of risk.

2 Developing

Standardized but still manual processes. First AI pilots without a framework.

3 Defined

Automated flows and requests. A responsible AI policy defined.

4 Managed

Automated lifecycle. AI risks managed with a recognized framework.

5 Optimized

End-to-end automation and responsible AI built into the whole cycle.

Know where you are. Decide where you are going.

The assessment places your organization on each of the ten dimensions and shows the first stretch of the road.

ES