Good Security Policy Names Names
TL;DR I wrote the security policies and procedures for a company against NIST CSF and NIST 800-53, and these days I ghostwrite books for the security leaders who live this
SOX governs financial reporting controls, and it overlaps constantly with security frameworks like PCI and NIST. These articles cover SOX in the real world, where one control often answers to several regimes at once.
TL;DR I wrote the security policies and procedures for a company against NIST CSF and NIST 800-53, and these days I ghostwrite books for the security leaders who live this
If this sparked something, let's talk about turning your expertise into a finished book.