A framework created for information technology (IT) management and IT governance. It is a supporting tool set that allows managers to bridge the gap between control requirements, technical issues and business risks. ​