This post is an attempt to create an easy-to-use security model for the average internet user. Basically, how secure is someone’s current behavior with respect to passwords and authentication, and how can they improve? People like moving up rankings, so let’s use that!
https://danielmiessler.com/blog/casmm-consumer-authentication-security-maturity-model-2/