The Incident Response Maturity Assessment is a professional consulting service offered by Pen Test Partners that evaluates an organisation's cybersecurity posture and readiness to manage and respond to cyber incidents. The assessment process begins one week prior to the main engagement, when a detailed questionnaire is sent to the client to identify key areas of concern and prepare relevant stakeholders for the sessions. The engagement is conducted over two days: Day 1 – Interactive Session: A structured, collaborative dialogue with stakeholders responsible for IT operations. The session uses targeted questioning to assess the organisation's infrastructure, identify existing strengths, and uncover gaps in cybersecurity posture. Day 2 – Evaluation, Scoring & Report: The assessment team conducts a formal evaluation and produces a written report that includes a maturity score and prioritised areas for improvement. The assessment covers the following capability domains: - Governance - Risk management - Compliance - Security operations - Incident management - Threat intelligence - Vulnerability management Outcomes of the assessment include identification of vulnerabilities and gaps, compliance alignment with industry regulations and standards, benchmarking against established cybersecurity frameworks, data-driven decision support for resource allocation, and recommendations to enhance incident response and organisational resilience.