ISO / IEC 27002

• Defines the way in which security mechanisms should be run
• Provides guidelines for ensuring that security controls are consistent with industry best practices