independent security assessment