The technical evaluation of a system's security features, made as a part of and in support of the approval/accreditation process, that established the extent to which a particular computer system's design and implementation meet a set of specified security requirements.