Citizens Interview Question

What is your experience with IT risk frameworks such as NIST?