Policies, procedures, and controls for managing IT resources and ensuring compliance.