Web3SOC’s maturity tiers range from 1 to 4, i.e., enterprise-grade to “nascent,” based on an organization’s operational, regulatory, security, and financial controls. The idea appears to be a play on the System and Organization Controls standards — like SOC 1 or SOC 2 — used to determine an organization's internal threat and confidentiality controls.