Digital Maturity Index vs. RYG Scoring for MSP Clients

Every MSP eventually wants one number per client: a score that says which accounts are healthy and which are drifting into risk. ScalePad's Digital Maturity Index (DMI) is the best-known answer to that need. The vCIO Framework takes a different approach, scoring each finding Red, Yellow, or Green against a documented standard.

These are not competing answers to the same question. They answer different questions, and MSPs who confuse them end up with a score that looks precise but never turns into a funded project. This post explains what each one measures, where each one is blind, and how to use them together.

What the Digital Maturity Index Is

A credit score for the client's technology

According to ScalePad's own documentation, DMI is a numeric score from 300 to 850, grouped into five bands, that grades a client's technology environment based on the overall health of its assets. ScalePad describes it as a proprietary benchmark built from asset and lifecycle data and industry best practices, designed to benchmark clients on productivity and risk factors. The comparison ScalePad itself draws is to a credit score: complexity distilled into one number.

That design has real strengths. DMI is calculated from data ScalePad already collects - hardware age, warranty status, lifecycle position - so it requires little manual effort. It is consistent across clients, which makes it genuinely useful for comparing accounts. And a single number is easy for a client to understand and easy to track over time.

What RYG Scoring Is

A status for every finding, measured against your own standard

RYG scoring in the vCIO Framework works at a different level. Instead of one number for the whole environment, every item in your Standards Library gets its own status: Red means immediate action or liability, Yellow means needs attention or inconsistent, Green means solid and systemized. The client's overall picture is the pattern of those statuses across technical, security, compliance, and relationship areas.

RYG is built by a person against a written standard, not calculated from asset data. That makes it slower to produce and dependent on the discipline of whoever does the scoring. It also means it can cover anything you can define a standard for - not only what an agent or a warranty lookup can see.

Where They Differ

	Digital Maturity Index	RYG scoring
Output	One number, 300-850, in five bands	A Red, Yellow, or Green status per finding
Source	Automatically calculated from asset and lifecycle data	Scored by a vCIO against your Standards Library
Coverage	What asset data can see	Anything you can write a standard for
Best question it answers	Which clients need attention first?	What exactly needs fixing, and will the client fund it?
Effort	Low once data is connected	Higher - requires a documented standard and a review
Tool dependency	Part of ScalePad Lifecycle Manager	Tool-neutral - works in any platform or a spreadsheet

The Blind Spot in Any Single Number

A score is not a decision

A single number is excellent for triage and weak for action. Tell a client their score dropped and the natural response is "what does that mean I should do?" The number cannot answer that on its own. Someone still has to break it down into specific findings, and each finding into a recommendation with a price.

There is also a coverage question. An asset-based score sees what asset data can see: device age, warranty expiry, operating system support. Many of the risks that matter most in a client review are not asset properties at all. Whether backups are actually test-restored. Whether MFA covers every admin account. Whether a departed employee's access was removed. Whether the client's cyber insurance questionnaire matches reality. Whether anyone has a documented incident response plan. A client can have new hardware across the board and still carry serious unaddressed risk in every one of those areas.

RYG scoring handles both problems by design. Each score is attached to a specific finding, and in the vCIO Framework every Red or Yellow finding has to end in one of two places: a funded remediation project or a signed risk acceptance. The score is the start of a decision, not a summary of one. That is also what makes it a revenue tool - our post on Good, Better, Best QBR recommendations shows how each finding becomes three priced options.

Where DMI Is the Better Tool

None of this makes DMI less useful - it makes it useful for a different job. DMI is the better tool when you need to rank a whole client base quickly, spot which accounts have deteriorated since last quarter, or build a hardware refresh conversation around lifecycle data the client can see for themselves. It requires no manual scoring, so it scales to every client, including the ones that do not get a full review.

That last point matters. In the framework's tier model, Tier A (Always Engaged) and Tier B (Betterment Focused) clients get full RYG scoring at every Technology Business Review (TBR). Tier C (Core Consistent) and Tier D (Sustain) clients get lighter reviews. An automated score is a practical early-warning signal for exactly those lighter-touch accounts.

How to Use Them Together

Use the number for triage. If you run ScalePad, let DMI rank your client base and flag accounts whose score has dropped. That tells you where to look first.

Use RYG for the review. In the TBR - what most MSPs call the QBR - score the client against your Standards Library, including the process, security, and compliance items no asset scan can see. Present findings, not a number.

Tie every finding to a decision. Each Red or Yellow ends in a funded project or a signed risk acceptance, recorded before the meeting ends.

Keep your standard independent of the tool. Your Standards Library should exist outside any platform, so the scoring means the same thing if you change tools. Our guide to Lifecycle Insights alternatives covers why that matters when a platform changes under you.

If you do not run ScalePad, the same structure works with any source of asset data for triage. And for the relationship side of account health - engagement, satisfaction, renewal risk - see our guide to the MSP client health score, which uses the same RYG model.

Frequently Asked Questions

What is the Digital Maturity Index?

The Digital Maturity Index (DMI) is ScalePad's proprietary score for a client's technology environment. It runs from 300 to 850, is grouped into five bands, and is calculated from asset and lifecycle data to benchmark clients on productivity and risk factors.

What does RYG mean in MSP client scoring?

RYG stands for Red, Yellow, Green. In the vCIO Framework, Red means immediate action or liability, Yellow means needs attention or inconsistent, and Green means solid and systemized. Each finding is scored against a documented Standards Library.

Is DMI or RYG better for client reviews?

They do different jobs. DMI is better for quickly ranking and monitoring a whole client base from asset data. RYG is better inside the client review itself, because each score is tied to a specific finding and a decision the client can fund or formally decline.

Can I use RYG scoring without ScalePad?

Yes. RYG scoring is tool-neutral. It works in any vCIO platform, in your PSA, or in a spreadsheet, because the logic lives in your written standard rather than in the software. Our vCIO and QBR software comparison covers the main platforms if you are choosing one.

See how your own client scoring holds up: take the free vCIO assessment, or download the vCIO Framework v1.15 for the Standards Library and RYG rubrics.