Explain the two things that must be determined through regular assessment and evaluation of the security architecture.

What will be an ideal response?

First, an organization's security policies, procedures, and technologies must continue to remain effective. Second, any emerging trends in security should be identified and a strategy developed to address the relevant ones. Ideally, the assessment process is supported by a robust set of security metrics.