Complete multiple assessments to determine how mature the security architecture should be for your organization. These assessments will look at:
- IT complexity
- Security operational maturity
- The perceived value of security architecture within the organization