Fawzooz

UCSMM · Unified Cognitive Security Maturity Model

How well can you protect the systems that now think for you?

Find out where your organisation stands, and what to fix first.

Read the modelAssess your maturity

01Three ideas, one model

The philosophy, what it protects, and how you build it.

Three ideas that grew up together. The full explanation is in the UCSMM Field Guide.

  1. 1 · The philosophy

    Invisible Engineering

    Security that works quietly and protects the freedom to think and choose.

  2. 2 · What it protects

    The Cognitive Shield

    The human mind is the new perimeter: judgement, attention and choice. Human-factor anchor: ISO 45003.

  3. 3 · How you build it

    UCSMM

    Four dimensions, five levels, one honest assessment, a clear next step.

02The core logic

Buying AI does not make you resilient. Building the capability to protect it does.

Adopting AI turns into resilience only once you build the capability to protect it — and governance is what makes that turn happen.

AI adoption intensity
Cognitive security capability
Enterprise security resilience

03Explore the model

Four dimensions, five levels, one roadmap.

Pick a tab, then click any item to read it. Short by design: the full detail is in the field guide.

4capability dimensions
5maturity levels
20assessment items
3ISO 27001 · 42001 · 45003
A
AI governance
B
Cyber resilience
C
Intelligent threat detection
D
Adaptive security management
UCSMM
Dimensions · A

AI governance

Who owns each decision across the model lifecycle, under which document, and with what authority to stop. Not an ethics committee but a traceable accountability path: who authorised deployment, who reviews impact, and who can withdraw a model this week.

Maturity evidenceISO/IEC 42001 AI management systemApproved model registerRoles & responsibilities matrixPre-deployment impact assessmentDocumented stop authority

04Self-assessment

Where do you stand right now?

Before you begin

What this assessment is, and what it is not.

The assessment is a self-assessment against the model. Begin it and you are taking it on these terms:

  1. 1It is educational. It is not an audit, a certification, or legal or security advice for any particular organisation, and what you do with the result is your own responsibility.
  2. 2Your answers stay in this browser. Nothing is sent anywhere unless you choose to share the result yourself, at the end.
  3. 3The model is the author's work, given for you to measure yourself against and to teach from, naming its source — not to be sold, licensed, or issued as a certificate in its name.

About the model

Built on Prof. Dr. Mohamed Fawzi Elgendi's doctoral research and published as the UCSMM Executive Field Guide (2026).

Elgendi, M. F. (2026). Unified Cognitive Security Maturity Model (UCSMM). Fawzooz. https://fawzooz.ai/ucsmm