A security assessment is "[a]n evaluation of the security provided by a system, device or process."[1]