How KBC—operating in different countries with strong local commercial focus and accountability—introduced besides the “current” maturity, an innovative “required” maturity concept. The approach resulted in one KPI and a dashboard-wheel per entity in which the capabilities are the spokes, each showing a red-amber-green spectrum to steer for a target cyberrisk resilience in the KBC group.