I've had customers ask and question me about it. I write the policies and reference the relevant NIST guidelines. It's a good way to end those conversations qui

I've had customers ask and question me about it. I write the policies and reference the relevant NIST guidelines. It's a good way to end those conversations quickly. Even fed compliance generally won't argue.