Technical Assurance For Information Security Systems