Heavy-weighted sub-domains (IAM, Endpoint & Network Defense) drive the Cybersecurity maturity rollup. Cyber Insurance is captured for context and excluded from the maturity score.