In a general purpose computing system, a computer-assisted and user assisted method for assessing the risk of and/or determining the suitability of a target system to comply with at least one predefined standard, regulation and/or requirement, the target system including hardware and/or software, the general purpose computing system interacting with a user and performing the steps of: a) collectin