computer programs used to evaluate the level of security of information facilities and systems