Information security, cybersecurity and privacy protection. Evaluation criteria for IT security - Pre-defined packages of security requirements