The information security controls framework has been developed around the NIST Cybersecurity Framework but also incorporates best practices from ISO Security Management Systems, CIS Critical Security Controls and ISA 99 Industrial Automation and Control Systems Security.