to assess and validate applicable security controls and guidance to rectify identified deficiencies as well as ensure compliance with information technology and security requirements, policies, procedures and standards.

Source: ExecutiveBiz