The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of: