ISO 9000 ISO 9001:2008 and lastly ISO 9001:2015. According to Barnes, "Opponents claim that it is only for documentation. Proponents believe that if a company has documented its quality systems, then most of the paperwork has already been completed". Wilson suggests that ISO standards "elevate inspection of the correct procedures over broader aspects of quality", and therefore, "the workplace becomes oppressive and quality is not improved". One study showing reasons for not adopting this standard include the risks and uncertainty of not knowing if there are direct relationships to improved quality, and what kind and how many resources will be needed. Additional
Cyber security standards are ineffective. ISO/IEC 27002 controls objectives are incorporated into ISO 27001 in Annex A. ISO/IEC 21827 (SSE-CMM – ISO/IEC 21827) is an International Standard based on the Systems Security Engineering Capability Maturity Model (SSE-CMM) that can measure the maturity of ISO controls objectives. CISQ develops standards for automating the measurement of software size and software structural quality. CISQ is a special interest group of the Object Management Group that submits specifications for approval as OMG international standards. The measurement standards are used for the static program analysis of software, a software testing practice that identifies critical vulnerabilities in the code