Security architecture and design

 What does an assessor need to understand before she or he can perform an assessment? 

This question is related to Security architecture and design.