Security frameworks are guidelines used for building plans to help mitigate risks and threats to data and privacy. Frameworks support organisations’ ability to adhere to compliance laws and regulations. For example, the healthcare industry uses frameworks to comply with the United States’ Health Insurance Portability and Accountability Act (HIPAA), which requires that medical professionals keep patient information safe. ### Purpose of security frameworks - Protection PII - Securing financial information - Identifying security weaknesses - Managing organisational risks - Aligning security with business goals ### Components of security frameworks - Identifying and documenting security goals - Setting guidelines to achieve security goals - Implementing security processes - Monitoring and communicating results