process or control framework
163470·updated Aug 30, 2026A framework that contains a set of processes or controls, established by another party, that organizations are expected to implement in support of establishing an effective system of internal control. These frameworks are usually developed by an industry group, regulator, governmental entity, standard-setting body, or other organization (collectively referred to as sponsoring organizations ) to obtain information from organizations with which they do business about their processes and controls. The most common types of process or control frameworks relate to security and privacy.
Source
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.
Classifications
Entity Type
Sensitivity
Information Class
Variants
Framework definitions
- §1 · glossary
- A framework that contains a set of processes or controls, established by another party, that organizations are expected to implement in support of establishing an effective system of internal control. These frameworks are usually developed by an industry group, regulator, governmental entity, standard-setting body, or other organization (collectively referred to as sponsoring organizations ) to obtain information from organizations with which they do business about their processes and controls. The most common types of process or control frameworks relate to security and privacy.Attribution from the CKI glossary mapping stage (glossary)
- §1 · legacy_primary
- A framework that contains a set of processes or controls, established by another party, that organizations are expected to implement in support of establishing an effective system of internal control. These frameworks are usually developed by an industry group, regulator, governmental entity, standard-setting body, or other organization (collectively referred to as sponsoring organizations ) to obtain information from organizations with which they do business about their processes and controls. The most common types of process or control frameworks relate to security and privacy.DR-088 backfill from the noun definition column