Assessing the compliance and the risk posture of the system