There are many ways of going about assessing the overall framework and structure of a secure information environment. Research and discuss at least one tried and true method that allows for both the building and vetting of a strong and protected computing environment that can pass compliance inspections, and still serve its stakeholders efficiently.