The process of evaluating whether a system meets legal, regulatory, or organizational requirements before deployment.