Also, several organizations said that they had employed self-assessment tools, such as the Computer Security Institute's Computer Security Compliance Test, to compare their organization's programs to preestablished criteria.
There are only assessments from external sources.