▁the ▁management ▁framework . ▁ ▁The ▁security ▁management ▁framework ▁defines ▁the ▁sub - process es ▁for ▁development , ▁implementation ▁and ▁evalu ations ▁into ▁action ▁plans . ▁Furthermore , ▁the ▁management ▁framework ▁defines ▁how ▁results ▁should ▁be ▁reported ▁to ▁clients . ▁ ▁The ▁meta - process ▁model ▁of ▁the ▁control ▁sub - process ▁is ▁based ▁on ▁a ▁U ML ▁activity ▁diagram ▁and ▁gives ▁an ▁over view ▁of ▁the ▁activities ▁of ▁the ▁Control ▁sub - process . ▁The ▁grey ▁rectangle ▁represents ▁the ▁control ▁sub - process ▁and ▁the ▁smaller ▁beam ▁shapes ▁inside ▁it ▁represent ▁activities ▁that ▁take ▁place ▁inside ▁it . ▁ ▁The ▁meta - data ▁model ▁of ▁the ▁control ▁sub - process ▁is ▁based ▁on ▁a ▁U ML ▁class ▁diagram . ▁Figure ▁ 2 . 1 . 2 ▁shows ▁the ▁met am odel ▁of ▁the ▁control ▁sub - process . ▁ ▁Figure ▁ 2 . 1 . 2 : ▁Meta - process ▁model ▁control ▁sub - process ▁ ▁The ▁CON T RO L ▁rectangle ▁with ▁a ▁white ▁shadow ▁is ▁an ▁open ▁complex ▁concept . ▁This ▁means ▁that ▁the ▁Control ▁rectangle ▁consists ▁of ▁a ▁collection ▁of ▁( sub ) ▁concepts . ▁ ▁Figure ▁ 2 . 1 . 3 ▁is ▁the ▁process ▁data ▁model ▁of ▁the ▁control ▁sub - process . ▁It ▁shows ▁the ▁integration ▁of ▁the ▁two ▁models . ▁The ▁d otted ▁ar rows ▁indicate ▁the ▁concepts ▁that ▁are ▁created ▁or ▁adjust ed ▁in ▁the ▁corresponding ▁activities . ▁ ▁Figure ▁ 2 . 1 . 3 : ▁Process - data ▁model ▁control ▁sub -