We know that management must identify the framework used to evaluate the effectiveness of internal controls over financial reporting. However, do we actually understand the framework used? What framework do most U.S. public companies use?