System assessment

Definition
A system assessment is

"[a] comprehensive assessment of the management and operational and technical security controls in an information system, made in support of security accreditation, to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements of the system."