The PRIMARY outcome of a certification process is that it provides documented
A.
system weaknesses for remediation.
B.
standards for security assessment, testing, and process evaluation.
C.
interconnected systems and their implemented security controls.
D.
security analyses needed to make a risk-based decision.