7.16 - Appendix C. Requirements Mapping and Compliance Matrix
8.12 - Basics of Software Auditing