Review of an organization's capacity to meet, or continue to meet, initial and ongoing requirements as a product or service provider. Note: Auditable requirements are set forth in agreements (e.g. contracts) and may include security, privacy, quality, or other requirements.
Sources:
CNSSI 4009-2022
from
ISO 15638-1:2012 - adapted