Could anyone point me to a controls catalogue and a good controls framework please.
Background: I recently attended a security meetup and had casual chat with couple of senior members. Each of them has there own view on controls and how they define controls.
After talking to them I was completely lost. I would like to start from scratch.