Is a measure ofconfidence that the security features, practices, procedures, and architecture of a system accurately mediates and enforces the security policy.