Information Security Control FrameworksNIST Special Publication 800-53 (NIST SP 800-53): Security and Privacy Controls for Information Systems and Organizations
ISO/IEC 27000-seriesISO/IEC 27017: Code of practice for information security controls based on ISO/IEC 27002 for cloud services
ISO/IEC 27000-seriesISO/IEC 27006: Requirements for bodies providing audit and certification of information security management systems