"Information security - legislation" - what regulation should be applied so that there are no problems with regulatory authorities?

Question

Information Security

Actually, I began to study in depth such a topic as "documenting information security" literally like 3 months ago, before that I worked for 10 years in the company, as a system administrator (without security connection).
Now I am studying:
Law of the Russian Federation No. 149-FZ "On Information, Information Technologies and Information Protection",
Federal Law "On Personal Data" dated July 27, 2006 No. 152-FZ.
Question: what other regulatory documents should be used in ensuring information security at a documented level so that there are no claims from regulatory authorities during verification?

Answer 1

lukatsky.blogspot.ru