Assess the security controls in accordance with the assessment procedures defined in a security assessment plan.