A formal examination of an organization adherence to regulatory requirements, industry standards, and internal security policies.