Which of the following is a standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system? Response:

FITSAF (Federal Information Technology Security Assessment Framework) is not a widely recognized standard for assessing the effectiveness of computer security controls.

The Trusted Computer System Evaluation Criteria (TCSEC), also known as the "Orange Book," was a U.S. government standard that defined different classes of security and provided a framework for evaluating the effectiveness of computer security controls. It detailed requirements for trusted systems based on confidentiality.

FIPS (Federal Information Processing Standards) are a set of standards issued by NIST, but FIPS itself is an umbrella for many standards, not a single standard for assessing overall computer system security control effectiveness like TCSEC.

SSAA (System Security Accreditation Agreement) is part of a certification and accreditation process, not a standard defining requirements for assessing control effectiveness.