providing quality assurance services in the field of information security, namely, testing, analysis and evaluation of information technology service providers to determine conformity with established accreditation standards