Which of the following BEST describes the purpose of performing security certification?

A.
To identify system threats, vulnerabilities, and acceptable level of risk

B.
To formalize the confirmation of compliance to security policies and standards

C.
To formalize the confirmation of completed risk mitigation and risk analysis

D.
To verify that system architecture and interconnections with other systems are effectively
implemented