or, (2) evaluations to assesswhether appropriate security measures have been takento permit the system to be used operationally in aspecific environment.