We are initiating an audit of the U.S. Department of Commerce's system security assessment process. Our objective is to assess the effectiveness of the system security assessment and continuous monitoring program to ensure security deficiencies are identified, monitored, and adequately resolved.