You are the Information Security Manager of HDA Inc. You are responsible for selecting a consultant to assess the maturity level of the organization's information security management. An organization's information security manager is tasked with engaging a consultant to evaluate the maturity level of the organization's information security management. The MOST crucial aspect of the request for proposal (RFP) is: