Model-based assurance of security controls