This standard is intended for Information Security professionals responsible in identifying system vulnerabilities, investigating and documenting system security technologies and policies, and analyzing and evaluating system security technologies.