ISO/IEC 27007:2017 Information technology. Security techniques. Guidelines for information security management systems auditing

Link: ISO/IEC 27007:2017 Information technology. Security techniques. Guidelines for information security management systems auditing
Source: BSI Standards