The policies and procedures that the entity implements and the information technology (IT) infrastructure (hardware, operating systems, etc.) and application software that it uses to support business operations and achieve business strategies.