Problem
Do you have experience mapping various security frameworks and controls? Do you have anything to share about that? For instance, did you find the process frustrating? Enlightening? Do you find they all generally agree on the basics or is there wide divergence? Has that changed over time?