Information security controls frameworks, such as HIPAA, NIST SP MARS-E, IRS 1075, ISO 27001 and more define how we can ensure the confidentiality, integrity and availability of information in a manner that can be measured.