Which of the following BEST describes the purpose of performing security certification?

To identify system threats, vulnerabilities, and acceptable level of risk

To formalize the confirmation of compliance to security policies and standards

To formalize the confirmation of completed risk mitigation and risk analysis

To verify that system architecture and interconnections with other systems are effectively implemented