Now available — Malaysia

Your organisation's IT health, scored continuously.

Axceed BOS delivers a practitioner-validated, standards-calibrated health score across Resiliency, Security, and ESG — so your board, regulator, and bank can trust it.

Business Operating ScoreLive
Resiliency
73
Defined · L3
Security
68
Managed · L2
ESG
61
Managed · L2
Composite BOS
69
69/100
Managed · L2
MY-v1.0 · v1.0
Why Axceed BOS

Not a questionnaire. A continuously computed score.

Every weight, gate, and maturity descriptor is database-defined and versioned. When your score changes, we tell you exactly why — the signal, the template, the version.

Practitioner-validated

On-site validation raises signal credibility to the highest tier on the platform. Not self-reported. Not assumed.

Continuous scoring

Real-time score updates as signals change — across all tiers including Foundation. No waiting for the next annual audit cycle.

Standards-calibrated

Every weight maps to COBIT 2019, NIST CSF 2.0, ISO 27001:2022, and ITIL 4. Not an invented scale.

Malaysia-contextual

PDPA 2024, NACSA CSA 2024, BNM RMiT, Bursa ESRF, and the Madani framework built into the Malaysia Country Template.

Auditable methodology

Every snapshot records the exact template version that produced it. Defensible to board, auditor, and regulator. Immutable.

GLC & Bursa-ready

Scoring methodology aligned with what GLCs, government agencies, and Bursa-listed companies expect.

Calibrated against
COBIT 2019NIST CSF 2.0ISO 27001:2022ITIL 4CIS Controls v8NACSA CSA 2024Bursa ESRFPDPA 2024BNM RMiT
Six-layer framework

Every dimension of your IT health.

Assessment spans six layers — from digital culture and governance strategy down to automated operations and ESG reporting.

L0

Digital workforce adoption & culture

Prosci ADKAR · ISO 10015

L1

IT strategy & governance roadmap

COBIT 2019 · ISO 38500 · TOGAF

L2

Modern cloud workplace & data

Microsoft MCRA · NIST SP 800-145

L3

Cybersecurity architecture & hardening

NIST CSF 2.0 · ISO 27001:2022 · CIS Controls v8 · NACSA CSA 2024

L4

High-performance infrastructure edge

TOGAF · Cisco SAFE · SD-WAN MEF 70.1

L5

Automated IT operations & efficiency

ITIL 4 · Google SRE · DORA DevOps

FAQ

Common questions.

How is Axceed BOS different from a checklist audit?

A checklist audit is a point-in-time snapshot, usually self-reported and reviewed once a year. Axceed BOS computes your score continuously from live signals, weighted by how credible the evidence is — self-assessment, vendor APIs, live system integrations, or CSVA on-site validation. The score moves as your actual posture changes, not just when you book an assessment.

What happens to our score if we don't update it?

The score reflects the most recent evidence available. If no new signals arrive, the score stays as last computed — it doesn't silently decay, but it also won't reflect improvements you've made unless those are captured as new evidence.

Can we choose which standards our score is measured against?

Foundation and Professional tiers use the Malaysia Country Template by default. Professional and above can configure an assessment blend — choosing which framework emphasis (COBIT, NIST, ISO, ITIL) applies — without changing the underlying calculation rules.

Is the methodology publicly available?

Yes — the Methodology page publishes the standards mapping, maturity scale, and governance rules. Exact numeric weights and credibility constants are not published publicly, consistent with how other rating methodologies protect their calibration while remaining auditable to clients and regulators.

Do you sell our data to vendors or insurers?

No. Axceed BOS is a subscription platform, not a data broker. Any future vendor marketplace integrations would be opt-in and disclosed at the point of activation.

Ready to score your organisation?

Start with a free 15-minute benchmark. Get an indicative BOS score across all six layers before committing to a subscription.