Evaluates an organization’s IT systems to ensure they are secure and compliant with regulations.