Systematic evaluation and assessment of an organization's information technology infrastructure, processes, and controls, based on industry standards and certified expertise, what includes:
