It is a set of controls, rules, and policies designed to help design and implement a fully functional cybersecurity program. While there are many cyber security frameworks developed to help guide entities in developing their internal controls, the two common ones are the NIST Cybersecurity Framework and the ISO-27000. There
