CISSP-ISSEP: Information Systems Security Engineering Professional

NIST SP 800-26, Security Self-Assessment Guide for Information Technology Systems, uses an extensive questionnaire containing specific control objectives and techniques against which systems can be tested and measured.