Over the last several years, a strong foundation of governance, policies and procedures was laid based on a tight alignment with regulatory requirements and standard frameworks such as NIST and COBIT .