Which framework should we use?

Question

Accepted Answer

NIST CSF 2.0 if you want the most defensible posture for insurance and customer questionnaires. CIS Controls v8 if you want a more prescriptive, action-oriented starting point. We'll recommend based on your situation.