An IT governance framework developed by ISACA. Not a security framework, but rather a governance framework with security components, its name is an acronym derived from Control, OBjectives, Information, and Technologies.