A framework applicable to companies that store customer data in the cloud to ensure that organizational controls and practices effectively safeguard the privacy and security of the data.