Leverage The Already Existing and Proven Cybersecurity Frame...
Start with and Stick to "The Basics"
Discover & Uncover Gaps within Information Systems