Printer-friendly version 1.18 A recognized industry standard framework shall be used to manage the information technology (IT) control environment to support compliance with the Standards and Requirements. ‹ Oversight Security Management ›