When aligning vulnerability management practices with industry frameworks, which of the following is the BEST choice to ensure that an organization's information security management system encompasses a broad set of security controls and risk management?
ISO/IEC 27005
ISO/IEC 27032
ISO/IEC 27002
ISO/IEC 27001