Using a framework to find gaps in your organization is a great way to improve your security posture. Have you thought about using the same framework with your clients? I think you find this discussion with Jim Harryman of Kinetic Technology Group a real eye-opener to the opportunities you have to reduce risk within your own company and that of your clients.