For the executive in an organization of any size, it is challenging to truly understand what a well performing security organization looks like without a careful and methodical examination of its various components. This paper focuses on providing a programmatic approach to help make initial and ongoing judgments with respect to several security organizations’ capabilities and level of maturity. Guidance for assessing the strengths and weaknesses is provided by focusing on the roles and skill sets needed to ensure the success of the security organizations.