Framework selection should consider current security maturity, including whether a security team, multifactor authentication, monitoring, documented policies, and formal risk management exist.

### Why this is right The course material lists these as questions for assessing current security maturity. They help an organization understand its existing capabilities and practices before selecting a framework. ### The concept Maturity assessment is more specific than simply asking whether the organization has bought security technology. It considers whether security roles exist, whether multifactor authentication is in place, whether monitoring occurs, whether policies are documented, and whether risk management is formalized. These details help reveal the organization's current ability to adopt and operate a framework. ### Terms - **Multifactor authentication (MFA)**: Authentication that requires more than one factor to verify identity. - **Risk management**: The process of addressing risks to organizational objectives. - **Security maturity**: The development and formality of security practices. ### Remember Framework choice should reflect current security capability, not just future ambition.