Information technology security assessment

Information technology security assessment is a planned evaluation of security controls to determine whether they are implemented correctly, operating as intended, and where weaknesses exist.