process or control framework

A framework that contains a set of processes or controls, established by another party, that organizations are expected to implement in support of establishing an effective system of internal control. These frameworks are usually developed by an industry group, regulator, governmental entity, standard-setting body, or other organization (collectively referred to as sponsoring organizations ) to obtain information from organizations with which they do business about their processes and controls. The most common types of process or control frameworks relate to security and privacy.