Who: Authorised framework maintainer and assessor. Entry: Proof > Maturity and the framework/requirement maintenance links.
- Create or select the intended framework version. Record source authority, jurisdiction, industry, version/effective date, maturity model and target level as applicable.
- Maintain its requirements and the level definitions used to assess each requirement. Preserve references so evidence remains traceable.
- Open Maturity, choose the framework, expand a requirement and select the level that the available evidence supports. Add the assessment explanation/evidence references offered by the form and save.
- Check the saved rating, target comparison and outstanding requirements. Not assessed is different from a low rating.
- When a published requirement or assessed level definition changes meaning, create a new framework version and record supersession rather than silently redefining existing assessments.
Complete when: Each rating can be explained against an identified framework/version. No rated framework appearing means configuration may be missing; it is not a zero-risk result. Imported content, source labels and maturity ratings do not establish certification or automatically prove current legal compliance.