ISO / IEC 17020 : general criteria for the operation of various types of bodies performing inspection
ISO / IEC TS 27008 [documento eletrónico] : information technology — security techniques — guidelines for the assessment of information security controls