When creating a security policy framework, its important to align business objectives with the correct framework.
Answer the following question(s):

What can happen if the framework you choose as a foundation does not fit your organizations business objectives?
Why is it important to pay attention to business objectives?