Also , several organizations said that they had employed self-assessment tools , such as the Computer Security Institute 's Computer Security Compliance Test , to compare their organization 's programs to preestablished criteria .
There are only assessments from external sources .