Test and validate, if your implemented security controls are working as intended. This can be done in a manual or automated approach depending on the respective controls.