Also, several organizations said that they had employed self-assessment tools, such as the Computer Security Institute's Computer Security Compliance Test, to compare their organization's programs to preestablished criteria.
The organizations have a number of tests.