This is the first episode in a multipart series covering the CIS Framework.  Just recently a major IT company settled a massive lawsuit for not disclosing risks they knew were present and as such the company was fined and sued, as well as many of the executives and some of the IT Staff.  The recommendation out of that case is that companies large and small should follow the CIS Framework for their Cybersecurity best practices.