Both of these frameworks are based on Industry Standard Frameworks (e.g., NIST f Governance	and	Organization f Policy and Standards f Infrastructure and Architecture f Applications; Operations f Awareness f Continuous Controls Monitoring f Metrics	and	Reporting f Compliance.