Which term describes general best practices that are commonly employed across industries?

• A. Guidelines
• B. Frameworks
• C. Standards
• D. Procedures

Answer: (B)

A framework provides a flexible, high-level structure of best practices that organizations across different industries can adopt and adapt. It sets up an overall approach to organizing how to manage security, risk, or operations, while allowing tailoring to specific environments and regulatory contexts. That broad applicability and adaptable architecture is what makes frameworks the best fit for describing general best practices used across industries. Guidelines are more advisory and lack a structured architecture, standards are formal requirements that are often industry-specific or mandatory, and procedures are step-by-step actions for particular tasks.