An assurance level is a named set of criteria formally defining a what is required to demonstrate confidence and certainty that a specific risk appetite is being met within a given domain. Normally, the criteria consist of a specific set of assurance controls expected to be applied and validated when mitigating a given risk event.