Testing, analysis, and evaluation of information security management systems to assure compliance with information security industry standards