by industry standards, including from the National Institute of Standards and Technology (NIST) Cybersecurity Framework, the International Organization for Standardization (ISO) standard, and COBIT 5 .