BS PD TR 27008:2011
BS PD ISO/IEC TR 27008:2011
Information technology. Security techniques. Guidelines for auditors on information security controls
standard published 10/31/2011 by British Standards Institution