 Certification is the process of evaluating, testing, and examining security controls that have been pre-determined based on the data type in an information system.The evaluation compares the current systems’ security posture with specific standards.The certification process ensures that security weaknesses are identified and plans for mitigation strategies are in place.