28. This control framework addresses the issue of control from three vantage points: business objectives, information technology resources, and information technology processes. a) ISACF's control objectives for information and related technology b) COSO's internal control framework c) COSO's enterprise risk management framework d) None of the above