Before joining Crowe Chizek, Nathan Johns was the chief of the information technology section for the FDIC. Johns: “I think a lot of the priorities need to be not so much on the process and the framework and the structure” “If you understand a good framework, whether it be CO or the other frameworks, then it becomes easy to adapt to different technologies,” he says. He says the NIST guidelines are not getting much traction, but the best training method is hands-on training.”]
Source: https://www.bankinfosecurity.com/transcript-nathan-johns-podcast-a-564