anchor: Also, several organizations said that they had employed self-assessment tools, such as the Computer Security Institute's Computer Security Compliance Test, to compare their organization's programs to preestablished criteria.
positive: The organizations have a number of tests.
negative: There are only assessments from external sources.