Aligning Security Controls to Frameworks