CISA: Integrating GRC Frameworks with Security Auditing