Infrastructure Maturity Assessment

Download SKILL.mdGet Murage How skills work

Open source. macOS, Windows and Linux.

At a glance

What it is

Cloud infrastructure maturity evaluation assessing automation, resilience, security, observability, and cost optimization to produce a maturity level scorecard with a roadmap.

A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.

File: SKILL.md
Length: 337 lines2,106 words, about 10 min read
Category: DevOps and cloudcloud infrastructure
Level: Intermediate
License: Apache-2.0

More DevOps and cloud skills.

The full skill.

The whole file, exactly as it downloads. Read it before you rely on it.

SKILL.md

337 lines · 2,106 words

Download

Infrastructure Maturity Assessment

You are a senior cloud infrastructure architect specializing in maturity assessments. Your role is to evaluate an organization's infrastructure practices across automation, resilience, security, observability, and cost management, mapping their current state to a maturity model and providing a clear roadmap to the next level. You assess reality, not aspirations.

When to Use

Use this skill when:

User asks about infrastructure maturity assessment techniques or best practices

Put this skill to work.

Questions.

What is the Infrastructure Maturity Assessment skill?

Cloud infrastructure maturity evaluation assessing automation, resilience, security, observability, and cost optimization to produce a maturity level scorecard with a roadmap.

How much does it cost?

Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.

Can I change it?

Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.

Give your first job to Murage.

Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.

Download Murage

No account needed · Runs on the AI plan you already pay for

Score	Criteria
1	All infrastructure managed via console/CLI. No version control. Snowflake servers everywhere. No documentation of what exists.
2	Some scripts for common tasks. Partial IaC adoption. Mix of manual and automated. No module reuse.
3	Primary infrastructure in IaC. Version controlled. Code review for changes. Modules exist for common patterns.
4	All infrastructure in IaC. Automated testing of IaC. Module library with versioning. Drift detection active. Policy as code.
5	Everything codified including policies, compliance, and cost controls. Self-service infrastructure catalog. Automated compliance validation.

Score	Criteria
1	Everything manual. Provisioning takes days or weeks. Runbooks are outdated or nonexistent.
2	Some automation for repetitive tasks. Provisioning takes hours. Basic scripts exist but are fragile.
3	Automated provisioning for standard environments. Self-service for developers with guardrails. Takes minutes.
4	Full automation pipeline for infrastructure changes. GitOps workflow. Automated rollback. Takes seconds to minutes.
5	Dynamic infrastructure. Auto-scaling handles all scenarios. Infrastructure adapts to demand automatically. Zero-touch operations.

Score	Criteria
1	Single points of failure everywhere. No redundancy. No backup strategy. Recovery is ad hoc. RTO/RPO are unknown.
2	Some redundancy for critical services. Basic backups exist. DR plan is theoretical. MTTR measured in hours.
3	Multi-AZ deployment. Automated backups with tested restores. DR plan documented and tested annually. MTTR under 1 hour.
4	Multi-region capability. Automated failover. Regular DR drills. Chaos engineering experiments. MTTR under 15 minutes. RTO/RPO well-defined.
5	Active-active multi-region. Zero-downtime deployments. Continuous chaos engineering. Self-healing infrastructure. MTTR under 5 minutes.

Score	Criteria
1	Default credentials. Wide-open security groups. No encryption. No audit trail. Shared root accounts.
2	Basic security groups. Some encryption. IAM exists but overly permissive. Sporadic patching.
3	Least-privilege IAM. Encryption at rest and in transit. Regular patching. Security scanning in CI. Audit logging.
4	Automated compliance checking. Secret management (Vault/KMS). Network segmentation. Vulnerability scanning. Incident response plan.
5	Zero-trust network. Automated remediation of compliance drift. Continuous security validation. Penetration testing regular. SOC 2/equivalent achieved.

Score	Criteria
1	No monitoring. Problems discovered by users. No logs aggregation. No metrics. Flying blind.
2	Basic uptime monitoring. Some metrics dashboards. Logs exist but not centralized. Alerting is noisy.
3	Centralized logging. Key metrics tracked. Meaningful alerts with runbooks. APM for critical services.
4	Full observability stack (metrics, logs, traces). SLO-based alerting. Dashboards for all services. Anomaly detection.
5	Unified observability platform. Automated root cause analysis. Predictive alerting. Business metrics tied to infrastructure metrics.

Score	Criteria
1	No cost visibility. Surprise bills every month. No resource tagging. Unused resources accumulate.
2	Monthly cost review. Basic tagging. Some right-sizing. Reserved instances for obvious cases.
3	Cost allocation by team/project. Regular right-sizing. Savings plans in place. Cost anomaly alerts.
4	FinOps practices. Automated cost optimization. Spot instances where appropriate. Cost per transaction tracked. Showback/chargeback.
5	Cost optimization is automated and continuous. Unit economics drive scaling decisions. Waste is near zero. Cost is a first-class engineering metric.

Score Range	Maturity Level
1.0 - 1.4	Level 1: Ad Hoc
1.5 - 2.4	Level 2: Repeatable
2.5 - 3.4	Level 3: Defined
3.5 - 4.4	Level 4: Managed
4.5 - 5.0	Level 5: Optimizing

Infrastructure Maturity Assessment

More DevOps and cloud skills.

The full skill.

Infrastructure Maturity Assessment

When to Use

Put this skill to work.

Questions.

Give your first job to Murage.

Search murage.ai

Infrastructure Maturity Assessment

More DevOps and cloud skills.

The full skill.

Infrastructure Maturity Assessment

When to Use

Put this skill to work.

Questions.

Give your first job to Murage.

Create a bot and use this skill.

Ask Ember to create the bot

Open the bot’s skills

Find Infrastructure Maturity Assessment and switch it on

Ask the bot for the job

About this skill.

Questions to Ask First

Infrastructure Context

Operational Context

Process Context

Assessment Framework

Maturity Levels

Dimension 1: Infrastructure as Code (Weight: 20%)

What to Evaluate

Dimension 2: Automation and Provisioning (Weight: 15%)

Dimension 3: Resilience and Availability (Weight: 20%)

What to Evaluate

Dimension 4: Security and Compliance (Weight: 15%)

What to Evaluate

Dimension 5: Observability (Weight: 15%)

What to Evaluate

Dimension 6: Cost Management (Weight: 15%)

What to Evaluate

Scoring Template

Overall Maturity Level Mapping

Results Interpretation

Level 1 to Level 2 Roadmap (3-6 months)

Level 2 to Level 3 Roadmap (6-12 months)

Level 3 to Level 4 Roadmap (6-12 months)

Level 4 to Level 5 Roadmap (12+ months)

Report Template

Process

Output Format

Edge Cases

Example