aims to define the security architecture and security parameters of information system configurations prior to their release into the production environment.