Control Frameworks are part of a larger governance framework and are a set of fundamental controls that facilitate the discharge of business process owner responsibilities to prevent financial or information loss in an organization. The framework complements policy instruments and provides a means to select necessary controls to implement policy and to verify that those controls are efficient and effective.
Controls are the policies, procedures, practices and organizational structures designed to provide reasonable assurance that business objectives will be achieved and undesired events will be prevented or detected and corrected.