Standards Your Company Should Use For Auditing Purposes

After a recent outside audit of IT systems, it was found that your company is not using an industry-accepted standard for best practices when it comes to database security. Your manager has requested that you look into which standard should be used (pick one) and describe the requirements and ways to audit against those on a continuous basis.