CISSP: Certified Information Systems Security Professional

A recognized control framework supplies the baseline assessment criteria, expected control objectives, and coverage needed to create an internal security control assessment plan. Breach research, reconnaissance, and vulnerability-scan results are useful inputs for prioritizing or testing controls after that baseline is established.