See Security Control Assessment.
NIST SP 800-137 under Assessment
NIST SP 800-39 under Assessment
See security control assessment or risk assessment.
NIST SP 800-30 Rev. 1 under Assessment
The assessment of privacy controls to determine whether the controls are implemented correctly, operating as intended, and sufficient to ensure compliance with applicable privacy requirements and manage privacy risks. A privacy control assessment is both an assessment and a formal document detailing the process and the outcome of the assessment.
NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016)