Establishing framework for security control ?