assessment and verification of information systems which includes trusted systems
identification and assessment of security requirements and deficiencies in applications, systems, local and wide area networks (LANs and WANs), and commercial switching, transmission and signaling networks
development of risk management guidelines.