(1)An independent examination of a work product or set of work products to assess compliance with specifications, standards, contractual agreements, or other criteria.

(2)To conduct an independent review and examination of system records and activities in order to test the adequacy and effectiveness of data security and data integrity procedures, to ensure compliance with established policy and operational procedures, and to recommend any necessary changes.