00 Blockchain Maturity Model v0.9
00 Blockchain Maturity Model v0.9
Approvals
Executive Director
Gerard R. Dache Title Date
Director, Standards
Meiyappan Masilamani Title Date
This document is the work product of the GBA Standards & Certification Working Group.
Government Blockchain Association
Blockchain Maturity Model
Contents
1 Introduction.............................................................................................................................1
1.1 Purpose.............................................................................................................................1
1.2 Scope.................................................................................................................................1
1.3 References.........................................................................................................................1
1.4 Structure...........................................................................................................................2
1.4.1 Level 1: Feasible.........................................................................................................2
1.4.2 Level 2: Functional.....................................................................................................2
1.4.3 Level 3: Operational...................................................................................................2
1.4.4 Level 4: Stable............................................................................................................2
1.4.5 Level 5: Scalable.........................................................................................................2
1.5 Terms & Definitions..........................................................................................................2
2 Elements..................................................................................................................................2
2.1 Decentralization................................................................................................................1
2.2 Governance.......................................................................................................................2
2.3 Identity Management.......................................................................................................3
2.4 Interoperability.................................................................................................................4
2.5 Performance......................................................................................................................4
2.6 Privacy...............................................................................................................................5
2.7 Reliability...........................................................................................................................6
2.8 Resilience (Fault Tolerance)..............................................................................................7
2.9 Security..............................................................................................................................7
2.10 Sustainability.................................................................................................................8
3 Domain Specific Requirements................................................................................................9
3.1 Financial Services..............................................................................................................9
3.1.1 Level 1: Feasible.........................................................................................................9
3.1.2 Level 2: Functional.....................................................................................................9
3.1.3 Level 3: Operational...................................................................................................9
Appendixes:
A Terms & Definitions
X Authors, Contributors, and Acknowledgements
ACM Amendment History and Change Management
Allyson Ugarte
Rose Enterprises
David Hardidge
Queensland Audit Office
Frederic de Vaulx
Prometheus Computing
Gerard Dache
Govt. Blockchain Assoc.
Ismael Arribas
International Standards
Organization
John Carpenter
Global Blockchain Summit
Juan Cabrera
Govt. Blockchain Assoc.
Meiyappan Masilamani
Govt. Blockchain Assoc.
Paul Dowding
L4S Corporation
Tatiana Revoredo
The Global Strategy
1 Introduction
Blockchain is a rapidly advancing technology. It is the core technology behind
cryptocurrency and in about ten years has exploded to become the 7th largest economy in
the world. However, it is still very much an immature technology. Organizations around the
world are building platforms, application, and implementing the technology in almost every
industry. Some governments are in the process of purchasing and acquiring blockchain
based solutions. However, they have little if any experience in acquiring, implementing, or
maintaining blockchain based systems.
This model is not associated with a specific single domain solution but developed to be
applicable to solutions in all domains.
1.1 Purpose
The purpose of the Blockchain Maturity Model (BMM) is to provide government
acquisition professionals a framework to assess blockchain based solutions for suitability
for use in enterprises or as a basis to support optimal acquisition decisions.
This model also has requirements and expectations to establish, implement, maintain,
and continually improve blockchain solutions. The requirements in this document shall be
satisfied to achieve a Government Blockchain Association (GBA) certification.
1.2 Scope
This standard applies to a blockchain solution and not an organization or the processes
used to develop the blockchain solution.
1.3 References
The BMM has five components 1in the series. They are:
BMM Overview
Blockchain Maturity Requirements
Training Program Requirements
Assessment Program Requirements
BMM Terms & Definitions
This document describes the Blockchain Maturity Requirements that form the basis for
both training and certification.
1
At the present time, this document is the only component that is ready for review and comment. The
other components are in early-stage development.
1.4 Structure
The capabilities defined in the Blockchain Maturity Model (BMM), are articulated in two
types of requirements and expectations for assessment. There are Generic requirements
& expectations, and Domain specific requirements & expectations.
Generic requirements & expectations refer to the set of elements that a blockchain
solution should have for it to be a reliable solution. Domain specific are a set of elements
that are necessary for the application of blockchain technology to specific domains.
Within each element, there are five levels. The five levels relate to degrees of reliability
and dependability for the given element or domain specific element. The five levels are:
• Level 1: Feasible
• Level 2: Functional
• Level 3: Operational
• Level 4: Stable
• Level 5: Scalable
To be assessed at any level, all expectations of that level, and below, must be met for all
the capabilities.
1.4.1 Level 1: Feasible
Elements are assessed as “feasible” when there is adequate evidence of their capability
to function as intended based on the results of preliminary analysis, studies, and test
results. The evidence should be suitable to support further research & development
funding.
1.4.2 Level 2: Functional
Elements are assessed as “functional” when there is adequate evidence that –
individually considered – they function as intended, generating the expected outcome
and, therefore, they are ready for proof-of-concept deployment.
1.4.3 Level 3: Operational
Elements are assessed as “operational” when there is adequate evidence that they work
as intended, generating the expected outcome, together with all the other parts of the
blockchain solution. Hence, the solution is capable of operational deployment, with
supporting documentation and recording of its performance.
2 Elements
For a solution to be reliable for use by organizations, it must be capable of meeting
requirements and expectations in the following elements:
Decentralization Privacy
Governance Reliability
Identity Management Resilience
Interoperability Security
Performance Sustainability
The following subparagraphs describe each element along with requirements and
expectations associated with each level.
2.1 Decentralization2
The goal of decentralization in a blockchain solution is to measure the degree of
distribution of nodes to maximize the benefits of blockchain technology. The table below
describes the requirements associated with each Level. The sub paragraphs below the
table provides the expectations and outcomes for each level depicted in the table.
Level 1: Feasible A charter3 shall address how the system shall be designed to
write and read data to a distributed system wherein control is
distributed among the persons or organizations participating
in the operation of the system.
2
See the glossary for the term “Decentralization”
3
See glossary for the definition of the term “Charter”
2.2 Governance
The goal of governance5 in a blockchain solution is to provide effective management of
key components, including assets, nodes, consensus mechanisms, infrastructure/network,
system, participants, protocols, records, and smart contracts or life cycle scripts.
Governance may be performed by a variety of mechanisms ranging from a centralized
authority to one or more mutualized network agreement. The table below describes the
requirements associated with each Level.
Level 1: Feasible The process for governing the solution shall be documented.
the governance plan and/or model shall include the following
minimum criteria:
● How data is protected and governed
● How decisions are made
Level 2: Functional The blockchain solution is governed by a group of people
and/or devices in accordance with the governance
established at level one.
Level 3: Operational Governance of the blockchain is performed by adjusting
resource allocation in response to blockchain performance
and activity.
5
ISO-37000 Guidance for the Governance of Organizations for supplemental guidance to this element.
2.4 Interoperability
The goal of interoperability is to facilitate the ability of a blockchain solution to share and
use information and assets with other legacy and blockchain solutions. The table below
describes the requirements associated with each Level.
Level 1: Feasible The project charter describes other systems that will need
to interoperate with the blockchain solution.
Level 2: Functional The blockchain solution has the capability to write data and
read data to external systems.
Level 3: Operational
Level 4: Stable The blockchain solution communicates with other systems
that are owned, operated, and used by parties outside of
their own organization or community.
Level 5: Scalable The blockchain solution interoperates with other systems
using industry recognized standards, interfaces or
protocols.
2.5 Performance
The goal of performance in a blockchain solution is to ensure that the transaction
volumes and speed are suitable for the use of the blockchain. This is measured based on
an understanding of demand requirements and resource utilization. It includes
consideration of latency, memory, transaction speeds, transaction finalization 6
Specific factors are considered for domains. See the Domain Specific Requirements
section of this document for additional information. The table below describes the
requirements associated with each Level.
6
See glossary for definition of transaction finalization.
2.6 Privacy
The goal of privacy in a blockchain solution is to ensure that the solution has an adequate
encryption and protections of Personal Identifiable Information (PII) in accordance with
international standards such as the General Data Privacy Regulation (GDPR) internally and
externally to the network considering the key components, composed of nodes,
consensus mechanisms, infrastructure/network, system, deterministic scripts and smart
contracts.
The table below describes the requirements associated with each Level. The sub
paragraphs below the table provides the expectations and outcomes for each level
depicted in the table.
Level 1: Feasible Privacy objectives and controls are defined for each
component of the blockchain solution. Project Charter for
Privacy shall be documented.
Level 2: Functional Privacy objectives and controls are defined, documented and
evident for each component of the blockchain solution.
7
See glossary for definition of key components
Level 3: Operational Privacy objectives and controls are defined, documented, and
tested for each component of the blockchain solution.
Determination of the level of privacy meets the minimum
requirements of the participants or regulatory authorities.
Level 4: Stable Privacy objectives and controls are defined, documented, and
tested for each component of the blockchain solution. A Risk
assessment is conducted, and mitigating controls are
implemented at the enterprise level.
The level of privacy demonstrably meets the minimum
requirements of the participants or regulatory authorities.
Level 5: Scalable Privacy objectives and controls are defined, documented, and
tested for each component of the blockchain solution.
An Impact assessment is conducted, and mitigating controls
are implemented at the enterprise and global level.
The level of privacy demonstrably meets the minimum
requirements of the global participants or regulatory
authorities.
2.7 Reliability
The goal of reliability in a blockchain solution is to provide the assurance that adequate
controls address and mitigate the resolution of the disputed forks, blocks, errors or fraud
within the performance and security criteria of the network. The table below describes the
requirements associated with each Level. The sub paragraphs below the table provides
the expectations and outcomes for each level depicted in the table.
Level 1: Feasible Project Charter shall describe how controls address and
mitigate the resolution of the disputed forks, blocks, errors or
fraud within the performance and security criteria of the network .
Level 2: Functional The solution shall implement a mechanism to ensure it is
partition tolerant.
Level 3: Operational The solution shall include a mechanism where inconsistencies
in the network wide data on the blockchain is identified and
identified.
Level 4: Stable Critical components are quantitatively analyzed to predict
and prevent failure. Preventive action is taken to ensure
system uptime and performance in accordance with defined
expectations.
Level 5: Scalable Mechanisms are in place to automatically adjust the
availability and capacity of critical components.
2.9 Security
The goal of security in a blockchain solution is to provide assurance that adequate
controls address and mitigate the security risks of its key components, composed of
nodes, consensus mechanisms, infrastructure/network, system, deterministic scripts and
smart contracts.
The table below describes the requirements associated with each Level.
Level 1: Feasible Security objectives and controls for confidentiality, integrity,
availability, and partition tolerance are defined for each
component of the blockchain solution. Project Charter for
Security shall be demonstrated.
Level 2: Functional Security objectives and controls are defined and documented
for each component of the blockchain solution.
2.10 Sustainability
The goal of sustainability 8in a blockchain solution is to ensure that the resources required
to sustain the solution are socially responsible. The primary resource for a blockchain is
energy. Consequently, this element focuses on energy consumption, efficiency, and
optimization.
The table below describes the requirements associated with each Level. The sub
paragraphs below the table provides the expectations and outcomes for each level
depicted in the table.
Level 1: Feasible The amount of energy consumption is estimated, considered,
and documented.
Level 2: Functional The energy consumption of the solution is measurable.
Level 3: Operational The solution provides incentives to conserve energy
consumption.
Level 4: Stable The solution uses mechanisms to manage energy
consumption.
Level 5: Scalable The solution uses self-adjusting mechanisms to optimize
energy consumption.
8
The authors of this model recognize that sustainability includes many aspects beyond energy
consumption. However, the measures that relate to a blockchain solution have not yet been determined.
Other sustainability goals and objectives may be included in future versions of this model as they become
apparent to the BMM team.
Consensus Agreement among DLT nodes that a transaction is validated and that the
distributed ledger contains a consistent set and ordering of validated
transactions
Consensus Mechanisms
Cryptographic hash function mapping binary strings of arbitrary length to binary strings of
fixed length, such that it is computationally costly to find for a given output
function
an input that maps to the output, it is computationally infeasible to find for
a given input a second input that maps to the same output, and it is
computationally infeasible to find any two distinct inputs that map to the
same output
Cryptography Discipline that embodies the principles, means, and methods for the
transformation of data in order to hide their semantic content, prevent
their unauthorized use, or prevent their undetected modification.
Decentralization
Decentralization Score A value or measure that describes the level of decentralization. It consists
of multiplying the number of validator nodes by the percentage of nodes
that need to achieve consensus.
Decentralized system distributed system wherein control is distributed among the persons or
organizations participating in the operation of the system
Digital Asset Asset that exists only in digital form or which is the digital representation
of another asset.
Domain Area The set of functions that are necessary for the application of
blockchain technology for specific uses.
Key Component A component that if it fails or is degraded would negatively impact the
overall performance of the blockchain solution.
Nodes
Smart Contract
Transaction Finalization
Special thanks to the following people for their hard work, contributions, and inputs: