116 | Appendix D: Management of risk maturity model the number of criteria that might be adopted, although models commonly contain fewer than 10 to avoid becoming unwieldy. The common structure for a maturity model is a matrix, as illustrated in Table D.1. On a completed matrix, each of the cells is populated with a competency. The levels within a maturity model provide: Stepping stones for incremental improvement A realistic and sensible transitional route from an immature state to that of a mature and capable organization A tool for the objective judgement of the quality of risk management practices. Competencies Attained or desired capabilities Maturity model Constructed as a matrix Levels Sequence for developing capabilities Criteria Primary risk management practices Figure D.1 Inputs to a maturity model D.7.1 Level labels D.5 sCoPE The boundaries to a maturity model are defined by the ends of the continuum between the competencies of a novice process to the sophistication of a fully mature process achieving optimum benefits. Each level is given a label and an overview or general description of what that level (of attainment) means. Examples of level labels adopted elsewhere are included in Table D.3 at the end of this appendix. D.7.2 Description of the levels When constructing a model it is necessary to define