Establish
a common definition serving the needs of different parties.
Provide
a standard against which business and other entities -
large or small, in the public or private sector, for profit
or not - can assess their control systems and determine
how to improve them.*