Iwould you like the information security office to perform a network-based assessment? (a& p) how many internet-facing hosts do you want the information security office to assess? would you like the information security office to perform a host-based assessment? which hosts? would you like the information security office to perform compliance, physical or enterprise assessment? if compliance, which regulations? (hipaa, ferpa, etc.) would you like the information security office to perform an application security assessment? which specific applications? (url, application name, installer, etc.) would you like this tested with or without credentials? would you like this tested with or without administrative credentials?