RAM Manufacturing LLC Is a Rapidly Growing Manufacturer of Parts

RAM Manufacturing LLC is a rapidly growing manufacturer of parts for the automotive industry. Maeve, the VP of Internal Audit is working with the chief technology officer, Justin, to propose an enterprise-wide data strategy project to the audit committee. Maeve suggests that the Internal Audit department perform a review of the company's data management and privacy procedures. This review will involve interviewing various departments throughout RAM Manufacturing to ask questions such as:
• What guidelines are in place for data privacy?
• How is data being shared?
• Are communications masked or encrypted securely?
• What are the differences between internal communications and communications with third parties?
• Where is data being stored?
• What procedures are in place for data retention?
• Do these procedures meet regulatory standards?
Maeve and Justin must decide which framework(s) to use as guidance for proposing recommendations for this project to the audit committee. What framework would you recommend? Justify your answer.