Vela Cyber

Governance, Risk
& Compliance

This site defines the Vela Cyber Framework and Critical Control Survey. It is a reference for how cybersecurity posture is assessed and improved across the operating group, not a live view of individual business scores or findings. Each programme stream is purpose-built for a different level of engagement and insight.

Programme Streams

Vela Cyber Framework
Full maturity evaluation

A comprehensive, control-by-control maturity assessment across 17 security domains. Each of the 56 controls is evaluated against a four-level maturity model - from Not in Place through to Defined - with structured evidence requirements at each level.

56 Controls
17 Domains
L0-L3 Maturity
Open framework →
Critical Control Survey
Quarterly portfolio assessment

Five high-impact controls assessed quarterly and delivered in the Portfolio QSR. RAG (Red, Amber, Green) ratings are derived from framework maturity levels, linking executive reporting to evidence-based assessment rather than subjective self-rating.

5 Controls
Quarterly Cadence
RAG Rating
Open controls →