![A close-up image of an iPhone with an open padlock with a key inserted resting on the screen.](/-/media/site/operational/ms-member-services/images/00252-ms.jpg?h=514&iar=0&w=800&rev=d88fb5807e984bb49ff616201f43bb46&hash=7EFA3F8A5FE6695BB6D9DCC8C6283B99)
Measuring a privacy program
Establishing an effective privacy program for an organization is only one part of the puzzle; assessing its strengths and weaknesses requires measurement against existing standards.
How can the PMM help you measure your program?
The PMM is used to measure an organization’s privacy program against a recognized maturity model. Considered a useful tool for management, consultants and auditors to measure progress against established benchmarks, it identifies next steps to move a program forward.
Each of the 73 GAPP criteria is broken down according to five maturity levels, providing the organization with a picture of its existing policy and initiatives:
- ad hoc
- repeatable
- defined
- managed
- optimized
The PMM recognizes that each organization’s privacy practices may be at a different level and will not all share the same requirements. It also recognizes that not all initiatives need to reach the highest level on the maturity model.