An Information Technology Security Assessment is a set of methods, procedures, and documents to find vulnerabilities and risks in an organization and assure that adequate security controls are well managed. Does it mean that you can walk through a company, fill a questionnaire, and write something in a fancy form?Not really.