{
  "label": "Illustrative sample data",
  "illustrative": true,
  "meta": {
    "year": 2026,
    "generatedAt": "2026-10-16T07:43:15.910Z",
    "n": 1200,
    "illustrative": true,
    "sufficient": true,
    "minCohort": 25,
    "modelVersion": "2.0.0",
    "assessmentVersion": "2.0.0",
    "previousYear": 2025,
    "previousN": 800
  },
  "headlineFindings": [
    {
      "id": "most-common-level",
      "statement": "Most programs sit at level 2 (Observe): 58% of 1,200 programs.",
      "numbers": {
        "level": 2,
        "levelName": "Observe",
        "share": 0.583,
        "n": 1200
      }
    },
    {
      "id": "share-connecting-or-above",
      "statement": "38% of programs are at level 3 (Prioritize) or above.",
      "numbers": {
        "share": 0.382,
        "level": 3,
        "levelName": "Prioritize"
      }
    },
    {
      "id": "lowest-practice",
      "statement": "Prove is the weakest practice: a mean of 2.1 out of 5.",
      "numbers": {
        "practice": "prove",
        "practiceName": "Prove",
        "mean": 2.08
      }
    },
    {
      "id": "highest-practice",
      "statement": "See is the strongest practice: a mean of 2.6 out of 5.",
      "numbers": {
        "practice": "see",
        "practiceName": "See",
        "mean": 2.59
      }
    },
    {
      "id": "gated-share",
      "statement": "The gating rule capped the level of 2% of programs: their weakest practice sat two or more levels below the level their overall score alone would give.",
      "numbers": {
        "share": 0.018,
        "rule": "The overall level is at most one level above the weakest practice: a program cannot prove or automate what it cannot see."
      }
    },
    {
      "id": "skipped-ai-agents",
      "statement": "31% of programs skipped the AI agents question because they have no AI agents yet.",
      "numbers": {
        "share": 0.305,
        "question": "Q17"
      }
    },
    {
      "id": "see-prove-gap",
      "statement": "Programs see more than they prove: See averages 2.6 and Prove 2.1, a gap of 0.5.",
      "numbers": {
        "see": 2.59,
        "prove": 2.08,
        "gap": 0.51
      }
    }
  ],
  "levelDistribution": {
    "1": 0.036,
    "2": 0.583,
    "3": 0.378,
    "4": 0.004,
    "5": 0
  },
  "levelCounts": {
    "1": 43,
    "2": 699,
    "3": 453,
    "4": 5,
    "5": 0
  },
  "overallMean": 2.36,
  "overallMedian": 2.38,
  "practiceMeans": {
    "see": 2.59,
    "understand": 2.27,
    "act": 2.38,
    "prove": 2.08,
    "govern": 2.47,
    "culture": 2.37
  },
  "byIndustry": [
    {
      "key": "financial-services",
      "label": "Financial services",
      "n": 104,
      "withheld": false,
      "overallMean": 2.29,
      "overallMedian": 2.34,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.067,
        "2": 0.558,
        "3": 0.375,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.54,
        "understand": 2.23,
        "act": 2.29,
        "prove": 2,
        "govern": 2.38,
        "culture": 2.29
      }
    },
    {
      "key": "healthcare",
      "label": "Healthcare",
      "n": 114,
      "withheld": false,
      "overallMean": 2.38,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.026,
        "2": 0.588,
        "3": 0.386,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.6,
        "understand": 2.28,
        "act": 2.39,
        "prove": 2.06,
        "govern": 2.53,
        "culture": 2.37
      }
    },
    {
      "key": "technology",
      "label": "Technology",
      "n": 112,
      "withheld": false,
      "overallMean": 2.34,
      "overallMedian": 2.38,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.054,
        "2": 0.58,
        "3": 0.366,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.57,
        "understand": 2.3,
        "act": 2.34,
        "prove": 2.05,
        "govern": 2.42,
        "culture": 2.36
      }
    },
    {
      "key": "manufacturing",
      "label": "Manufacturing",
      "n": 102,
      "withheld": false,
      "overallMean": 2.39,
      "overallMedian": 2.38,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.01,
        "2": 0.578,
        "3": 0.412,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.59,
        "understand": 2.35,
        "act": 2.4,
        "prove": 2.15,
        "govern": 2.52,
        "culture": 2.35
      }
    },
    {
      "key": "retail",
      "label": "Retail",
      "n": 111,
      "withheld": false,
      "overallMean": 2.32,
      "overallMedian": 2.33,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.045,
        "2": 0.649,
        "3": 0.306,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.55,
        "understand": 2.15,
        "act": 2.36,
        "prove": 2.03,
        "govern": 2.43,
        "culture": 2.36
      }
    },
    {
      "key": "energy-utilities",
      "label": "Energy and utilities",
      "n": 112,
      "withheld": false,
      "overallMean": 2.37,
      "overallMedian": 2.42,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.036,
        "2": 0.563,
        "3": 0.402,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.57,
        "understand": 2.29,
        "act": 2.39,
        "prove": 2.04,
        "govern": 2.52,
        "culture": 2.41
      }
    },
    {
      "key": "public-sector",
      "label": "Public sector",
      "n": 97,
      "withheld": false,
      "overallMean": 2.43,
      "overallMedian": 2.42,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.031,
        "2": 0.515,
        "3": 0.433,
        "4": 0.021,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.71,
        "understand": 2.33,
        "act": 2.42,
        "prove": 2.13,
        "govern": 2.5,
        "culture": 2.44
      }
    },
    {
      "key": "education",
      "label": "Education",
      "n": 109,
      "withheld": false,
      "overallMean": 2.42,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.018,
        "2": 0.578,
        "3": 0.394,
        "4": 0.009,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.69,
        "understand": 2.31,
        "act": 2.47,
        "prove": 2.18,
        "govern": 2.48,
        "culture": 2.37
      }
    },
    {
      "key": "professional-services",
      "label": "Professional services",
      "n": 111,
      "withheld": false,
      "overallMean": 2.29,
      "overallMedian": 2.32,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.045,
        "2": 0.631,
        "3": 0.315,
        "4": 0.009,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.49,
        "understand": 2.19,
        "act": 2.32,
        "prove": 2.02,
        "govern": 2.37,
        "culture": 2.33
      }
    },
    {
      "key": "media-telecom",
      "label": "Media and telecom",
      "n": 99,
      "withheld": false,
      "overallMean": 2.25,
      "overallMedian": 2.3,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.051,
        "2": 0.646,
        "3": 0.303,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.49,
        "understand": 2.12,
        "act": 2.26,
        "prove": 1.98,
        "govern": 2.39,
        "culture": 2.26
      }
    },
    {
      "key": "other",
      "label": "Other",
      "n": 129,
      "withheld": false,
      "overallMean": 2.48,
      "overallMedian": 2.47,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.016,
        "2": 0.527,
        "3": 0.45,
        "4": 0.008,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.7,
        "understand": 2.4,
        "act": 2.48,
        "prove": 2.2,
        "govern": 2.6,
        "culture": 2.49
      }
    }
  ],
  "bySizeBand": [
    {
      "key": "s1",
      "label": "Under 500 people",
      "n": 249,
      "withheld": false,
      "overallMean": 2.43,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.044,
        "2": 0.542,
        "3": 0.41,
        "4": 0.004,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.67,
        "understand": 2.32,
        "act": 2.42,
        "prove": 2.13,
        "govern": 2.58,
        "culture": 2.44
      }
    },
    {
      "key": "s2",
      "label": "500 to 2,499",
      "n": 255,
      "withheld": false,
      "overallMean": 2.36,
      "overallMedian": 2.37,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.02,
        "2": 0.6,
        "3": 0.373,
        "4": 0.008,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.6,
        "understand": 2.27,
        "act": 2.38,
        "prove": 2.05,
        "govern": 2.45,
        "culture": 2.38
      }
    },
    {
      "key": "s3",
      "label": "2,500 to 9,999",
      "n": 233,
      "withheld": false,
      "overallMean": 2.35,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.043,
        "2": 0.558,
        "3": 0.399,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.59,
        "understand": 2.28,
        "act": 2.36,
        "prove": 2.08,
        "govern": 2.44,
        "culture": 2.31
      }
    },
    {
      "key": "s4",
      "label": "10,000 to 49,999",
      "n": 224,
      "withheld": false,
      "overallMean": 2.32,
      "overallMedian": 2.34,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.045,
        "2": 0.621,
        "3": 0.33,
        "4": 0.004,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.56,
        "understand": 2.21,
        "act": 2.35,
        "prove": 2.06,
        "govern": 2.41,
        "culture": 2.32
      }
    },
    {
      "key": "s5",
      "label": "50,000 or more",
      "n": 239,
      "withheld": false,
      "overallMean": 2.36,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.029,
        "2": 0.594,
        "3": 0.372,
        "4": 0.004,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.55,
        "understand": 2.27,
        "act": 2.38,
        "prove": 2.07,
        "govern": 2.47,
        "culture": 2.38
      }
    }
  ],
  "byRole": [
    {
      "key": "ciso",
      "label": "CISO or security leader",
      "n": 174,
      "withheld": false,
      "overallMean": 2.38,
      "overallMedian": 2.41,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.04,
        "2": 0.586,
        "3": 0.374,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.6,
        "understand": 2.28,
        "act": 2.43,
        "prove": 2.05,
        "govern": 2.49,
        "culture": 2.4
      }
    },
    {
      "key": "awareness",
      "label": "Security awareness or culture lead",
      "n": 202,
      "withheld": false,
      "overallMean": 2.35,
      "overallMedian": 2.36,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.05,
        "2": 0.589,
        "3": 0.356,
        "4": 0.005,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.61,
        "understand": 2.3,
        "act": 2.35,
        "prove": 2.05,
        "govern": 2.43,
        "culture": 2.35
      }
    },
    {
      "key": "grc",
      "label": "GRC or risk leader",
      "n": 198,
      "withheld": false,
      "overallMean": 2.36,
      "overallMedian": 2.37,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.03,
        "2": 0.601,
        "3": 0.369,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.59,
        "understand": 2.28,
        "act": 2.34,
        "prove": 2.08,
        "govern": 2.44,
        "culture": 2.39
      }
    },
    {
      "key": "soc",
      "label": "SOC or incident response",
      "n": 213,
      "withheld": false,
      "overallMean": 2.34,
      "overallMedian": 2.37,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.042,
        "2": 0.559,
        "3": 0.399,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.54,
        "understand": 2.21,
        "act": 2.36,
        "prove": 2.07,
        "govern": 2.48,
        "culture": 2.34
      }
    },
    {
      "key": "exec",
      "label": "Executive or board",
      "n": 214,
      "withheld": false,
      "overallMean": 2.35,
      "overallMedian": 2.4,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.023,
        "2": 0.584,
        "3": 0.388,
        "4": 0.005,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.58,
        "understand": 2.23,
        "act": 2.37,
        "prove": 2.11,
        "govern": 2.48,
        "culture": 2.34
      }
    },
    {
      "key": "other",
      "label": "Other",
      "n": 199,
      "withheld": false,
      "overallMean": 2.41,
      "overallMedian": 2.39,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.03,
        "2": 0.578,
        "3": 0.377,
        "4": 0.015,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.64,
        "understand": 2.33,
        "act": 2.42,
        "prove": 2.11,
        "govern": 2.51,
        "culture": 2.4
      }
    }
  ],
  "byRegion": [
    {
      "key": "na",
      "label": "North America",
      "n": 286,
      "withheld": false,
      "overallMean": 2.39,
      "overallMedian": 2.41,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.017,
        "2": 0.591,
        "3": 0.385,
        "4": 0.007,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.61,
        "understand": 2.29,
        "act": 2.42,
        "prove": 2.09,
        "govern": 2.5,
        "culture": 2.37
      }
    },
    {
      "key": "emea",
      "label": "Europe, Middle East and Africa",
      "n": 317,
      "withheld": false,
      "overallMean": 2.36,
      "overallMedian": 2.38,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.044,
        "2": 0.58,
        "3": 0.369,
        "4": 0.006,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.59,
        "understand": 2.27,
        "act": 2.35,
        "prove": 2.07,
        "govern": 2.48,
        "culture": 2.37
      }
    },
    {
      "key": "apac",
      "label": "Asia Pacific",
      "n": 276,
      "withheld": false,
      "overallMean": 2.37,
      "overallMedian": 2.38,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.036,
        "2": 0.605,
        "3": 0.355,
        "4": 0.004,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.6,
        "understand": 2.25,
        "act": 2.4,
        "prove": 2.08,
        "govern": 2.47,
        "culture": 2.37
      }
    },
    {
      "key": "latam",
      "label": "Latin America",
      "n": 321,
      "withheld": false,
      "overallMean": 2.35,
      "overallMedian": 2.38,
      "mostCommonLevel": 2,
      "levelDistribution": {
        "1": 0.044,
        "2": 0.558,
        "3": 0.399,
        "4": 0,
        "5": 0
      },
      "practiceMeans": {
        "see": 2.58,
        "understand": 2.28,
        "act": 2.35,
        "prove": 2.07,
        "govern": 2.44,
        "culture": 2.36
      }
    }
  ],
  "domainCoverageMeans": [
    {
      "code": "SE",
      "mean": 2.32,
      "n": 1200
    },
    {
      "code": "IA",
      "mean": 2.36,
      "n": 1200
    },
    {
      "code": "DH",
      "mean": 2.32,
      "n": 1200
    },
    {
      "code": "EP",
      "mean": 2.4,
      "n": 1200
    },
    {
      "code": "WC",
      "mean": 2.4,
      "n": 1200
    },
    {
      "code": "AU",
      "mean": 2.41,
      "n": 1200
    },
    {
      "code": "AG",
      "mean": 2.37,
      "n": 1200
    },
    {
      "code": "SC",
      "mean": 2.35,
      "n": 1200
    },
    {
      "code": "RR",
      "mean": 2.29,
      "n": 1200
    }
  ],
  "yearOverYear": {
    "previousYear": 2025,
    "previousN": 800,
    "sufficient": true,
    "previousOverallMean": 2.21,
    "overallMeanDelta": 0.15,
    "levelDistributionDelta": {
      "1": -0.042,
      "2": -0.07,
      "3": 0.108,
      "4": 0.004,
      "5": 0
    },
    "practiceMeanDeltas": {
      "see": 0.19,
      "understand": 0.15,
      "act": 0.14,
      "prove": 0.15,
      "govern": 0.14,
      "culture": 0.15
    }
  },
  "pressFacts": [
    "1,200 programs completed the HRM Maturity Assessment in the 2026 edition. (illustrative sample data)",
    "The mean overall score is 2.36 out of 5; the median is 2.38. (illustrative sample data)",
    "4% of programs are at level 1 (Comply). (illustrative sample data)",
    "58% of programs are at level 2 (Observe). (illustrative sample data)",
    "38% of programs are at level 3 (Prioritize). (illustrative sample data)",
    "0% of programs are at level 4 (Orchestrate). (illustrative sample data)",
    "0% of programs are at level 5 (Preempt). (illustrative sample data)",
    "Prove is the weakest practice: a mean of 2.1 out of 5. (illustrative sample data)",
    "See is the strongest practice: a mean of 2.6 out of 5. (illustrative sample data)",
    "The gating rule capped the level of 2% of programs: their weakest practice sat two or more levels below the level their overall score alone would give. (illustrative sample data)",
    "31% of programs skipped the AI agents question because they have no AI agents yet. (illustrative sample data)",
    "Programs see more than they prove: See averages 2.6 and Prove 2.1, a gap of 0.5. (illustrative sample data)",
    "The mean overall score is up 0.15 from 2025 (800 programs). (illustrative sample data)",
    "All 11 industry cohorts reached the minimum of 25 records. (illustrative sample data)"
  ]
}