Cutting edge businesses that I have visited in the financial and technology sectors and the Defense Industrial Base (DIB) have developed their own methodologies that turn traditional IT risk management frameworks on their head.
FORBES: There Is No Need For A Cybersecurity Executive Order