The MarSec Schema

The ASTE Maturity Model: From Vulnerable to Verified in Five Stages

Not every organization can implement the full ASTE framework overnight. Some are just beginning to recognize that narrative security matters. Others have deployed narrative ledgers and run weekly retrieval audits. Most are somewhere in between. The question I hear most often is: "Where do we start?" This post answers that question with a maturity model. Five stages. Clear criteria. Practical next steps.

Latest Posts

From Burnout to Belonging: Why Mission‑Aligned Teams Outperform and Outlast

Burnout is epidemic.
I watch talented professionals leave organizations not because the work is hard, but because the work has lost meaning. They are extracted from, not invested in. They are optimized, not nurtured. They are resources, not humans.
The numbers are staggering. Seventy percent of employees report being disengaged. Fifty percent are actively looking for new roles. Thirty percent have left a job specifically because they lost connection to the mission.
This is not a retention problem. It is a trust problem.
Organizations that treat employees as extractable resources produce burnout. Organizations that treat employees as mission aligned partners produce belonging.

May 19, 2026 No Comments

The Marketing Engineer: A New Career for a New Discipline

“Marketing engineer” is not a title I invented.
It is a title I observed emerging. First in isolated job postings. Then in more. Then in the portfolios of practitioners who could no longer call themselves simply “marketers” or “strategists.”
Something new is being born.
The marketing engineer sits at the intersection of creativity and structure, of narrative and data, of human psychology and machine logic. They write poetry and build knowledge graphs. They understand trust as both a feeling and a metric. They speak the language of the CMO and the CISO.

May 19, 2026 No Comments

The Zero‑Trust Marketing Model: Verify Everything, Trust Nothing

Twenty years ago, cybersecurity underwent a revolution.
The old model assumed everything inside the network perimeter could be trusted. Firewalls kept threats out. Everything inside was safe. That model failed spectacularly as threats evolved and perimeters dissolved.
Zero trust security emerged as the replacement. Never trust, always verify. Every request is authenticated. Every access is authorized. Every transaction is monitored.
Marketing is undergoing the same revolution.

May 19, 2026 No Comments

Why a Maturity Model

Marketing Security is not binary. You are not either “secure” or “vulnerable.” There is a spectrum.

A maturity model helps you:

Assess your current state objectively
Prioritize improvements based on where you are
Communicate progress to leadership
Benchmark against peers

The model has five stages, from initial vulnerability to verified leadership.

Stage One: Ad Hoc (Vulnerable)

Characteristics:

No narrative ledger exists
Marketing and security operate separately
Claims are unverifiable (Level 0-1 on verifiability hierarchy)
No monitoring of drift, hallucination, or misalignment
No dedicated role for narrative security
Response to incidents is reactive and inconsistent

How to know you are here:

You cannot answer: “What are our five most important core claims?”
You have never run a retrieval audit
Your CMO and CISO have never discussed narrative integrity
You have experienced a narrative incident in the last year and cannot explain why

Typical business impact:

Discoverability is declining but you are not sure why
Sales cycles are lengthening
Trust density is low (below 40%)
AI retrieval is inconsistent

Next steps to progress:

Document your five most important core claims
Run one baseline drift audit
Schedule a conversation between marketing and security leadership
Assign someone (fractionally) to own narrative security

Time to next stage: 1-2 months

Stage Two: Aware (Recognizing the Threat)

Characteristics:

Leadership recognizes that narrative security matters
Baseline audits have been run (you know your drift, hallucination, misalignment scores)
A narrative ledger has been started (even if incomplete)
Some claims have been moved to Level 2 (third‑party attestation)
Marketing and security have begun collaborating

How to know you are here:

You can name your drift score (even if it is low)
You have a document called “narrative ledger” (even if sparse)
Your CMO and CISO have met at least twice about narrative integrity
You have experienced an incident and learned from it

Typical business impact:

You understand why discoverability is declining
Trust density is still low (40-55%) but you can measure it
You are losing opportunities but you know why
Leadership is supportive of investment

Next steps to progress:

Complete your narrative ledger (all core claims documented with evidence)
Implement structured data on your most important pages
Move 3-5 priority claims to Level 2 verification
Run weekly retrieval audits for your top 10 queries
Assign a dedicated Marketing Security Officer (even fractional)

Time to next stage: 3-6 months

Stage Three: Structured (Building Infrastructure)

Characteristics:

Narrative ledger is complete and version‑controlled
Knowledge graph exists (even if basic)
Structured data implemented across key touchpoints
Regular monitoring (weekly retrieval audits, monthly drift scores)
Dedicated MSO role (fractional or full‑time)
Incident response playbooks exist

How to know you are here:

Your drift score is above 60%
Your hallucination index is above 70%
Your misalignment score is above 60%
You have responded to at least one incident using a playbook
Your team knows what a narrative ledger is and how to use it

Typical business impact:

Discoverability is stable or improving
Trust density is 55-70%
Sales cycles are predictable
You have established some authoritative precedence in your category

Next steps to progress:

Expand knowledge graph with deeper relationships and external references
Move priority claims to Level 3 (audited verification)
Implement continuous monitoring (automated drift detection)
Train all content creators on entity consistency
Run quarterly cross‑functional incident response exercises

Time to next stage: 6-12 months

Stage Four: Verified (Trust as Competitive Advantage)

Characteristics:

Narrative ledger is machine‑readable and accessible to AI systems
Comprehensive knowledge graph with external ontology mappings
Most priority claims at Level 3 verification (certified, audited)
Automated monitoring with real‑time alerts
Full‑time MSO with cross‑functional authority
Proactive incident prevention (not just response)

How to know you are here:

Your drift score is above 80%
Your hallucination index is above 85%
Your misalignment score is above 80%
You have not had a critical incident in the last six months
AI systems prioritize your content for category queries
Competitors cite your narrative ledger as authoritative

Typical business impact:

Discoverability is a competitive advantage
Trust density is 70-85%
Sales cycles are shorter than category average
You are the canonical source for your category
Customer acquisition cost is lower than peers

Next steps to progress:

Explore Level 4 verification (cryptographic proof) for highest‑stakes claims
Build an API for your knowledge graph
Contribute to industry ontology development
Publish anonymized trust density benchmarks to establish category leadership
Begin consulting or training others (optional)

Time to next stage: 12-24 months

Stage Five: Verified+ (Industry Leadership)

Characteristics:

Your narrative ledger is the industry reference
Level 4 verification implemented for critical claims
Your knowledge graph is used by other organizations
You have influenced ontology standards in your category
Your MSO is a recognized expert
Narrative security is embedded in your product (not just marketing)

How to know you are here:

Your drift score is above 90%
Your hallucination index is above 95%
Your misalignment score is above 90%
Industry peers ask to benchmark against you
AI systems explicitly favor your content in retrieval
You have not had a material incident in over a year

Typical business impact:

Trust density above 85%
You define category terms
Competitors position relative to you
Customer acquisition cost is lowest in category
Retention is highest in category

Next steps to progress:

Maintain and defend your position
Continue innovation in verification methods
Share learnings to raise the entire category
(There is no “beyond” — this is continuous excellence)

Time to reach: 24-36 months from Stage One (for organizations that prioritize)

Assessing Your Current Stage

Use this simple self‑assessment.

Score 1 point for each true statement:

We have documented our five most important core claims.
We have run a baseline drift audit in the last six months.
Our CMO and CISO have discussed narrative security in the last quarter.
We have a document called a narrative ledger (any version).
We have at least one claim verified by third‑party attestation (Level 2).
We have implemented structured data (schema.org) on our website.
We run retrieval audits at least monthly.
We have a dedicated person (even fractional) responsible for narrative security.
Our drift score is above 60%.
We have responded to a narrative incident using a playbook.
We have a knowledge graph (any version).
Our drift score is above 80%.
We have claims verified by audited certification (Level 3).
Our narrative ledger is machine‑readable and accessible to AI.
Our trust density is above 85%.

Scoring:

0-3: Stage One (Ad Hoc)
4-6: Stage Two (Aware)
7-10: Stage Three (Structured)
11-13: Stage Four (Verified)
14-15: Stage Five (Verified+)

Case Study: Moving from Stage Two to Stage Four

A mid‑sized B2B software company assessed themselves at Stage Two (Aware). They had run baseline audits. Their scores were poor (drift 45%, hallucination 55%, misalignment 40%). But they understood the problem.

Over 18 months, they systematically moved to Stage Four (Verified).

Months 1-6: Completed narrative ledger. Implemented structured data. Moved 10 priority claims to Level 2. Assigned a fractional MSO. Drift improved to 65%.

Months 7-12: Built knowledge graph. Implemented weekly retrieval audits. Moved 5 claims to Level 3. Hired full‑time MSO. Drift improved to 75%.

Months 13-18: Made narrative ledger machine‑readable. Automated monitoring. Achieved authoritative precedence in their sub‑category. Drift reached 82%. Hallucination index 88%. Misalignment 84%.

Business impact: Sales cycles shortened by 35%. Customer acquisition cost decreased by 25%. Retention improved by 20%. The CEO credited the ASTE maturity journey as the highest‑ROI investment of the year.

Pacing Your Journey

Do not try to jump from Stage One to Stage Four in six months. You will burn out your team and cut corners that create new vulnerabilities.

Realistic timeline:

Stage One → Stage Two: 1-2 months
Stage Two → Stage Three: 3-6 months
Stage Three → Stage Four: 6-12 months
Stage Four → Stage Five: 12-24 months

Total from start to verified leadership: 24-36 months

This may seem slow. But consider the alternative: staying at Stage One indefinitely, losing ground to competitors every quarter.

The journey is long. Each stage delivers business value. You do not need to reach Stage Five to see ROI. Even moving from Stage One to Stage Two pays for itself in reduced wasted spend and improved discovery.

What Leadership Needs to Know

When presenting this maturity model to your CEO or board:

Frame the investment:

Stage One is where most organizations are today (even large ones)
Stage Two and Three are achievable within 6-12 months with modest investment
Stage Four and Five create sustainable competitive advantage

Show the business impact:

Each stage correlates with measurable improvements in sales cycles, acquisition cost, retention, and trust density
The gap between Stage One and Stage Three is often 2-3x better business outcomes

Emphasize the risk of staying: