This is a standard that sets essential requirements for assessing the effectiveness of computer security controls built into a computer system? Response:

FITSAF (Federal Information Technology Security Assessment Framework) is not a widely recognized standalone standard for assessing individual computer system controls' effectiveness in the same way as TCSEC.

The Trusted Computer System Evaluation Criteria (TCSEC), also known as the "Orange Book," was a U.S. Department of Defense standard that defined fundamental requirements for assessing the security effectiveness of computer systems. It introduced a rating system (e.g., A1, B1, C2, D) based on confidence in the security controls' ability to protect classified information.

FIPS (Federal Information Processing Standards) are a set of standards published by NIST, but FIPS is a collection of standards, not a single standard for assessing control effectiveness as specifically as TCSEC.

SSAA (System Security Accreditation Agreement) is a document outlining the security accreditation of a system, not a standard for assessing control effectiveness.