Write paper on understanding ISO and NIST guidelines. Which method would you recommend to an organization (Target Company) that was building a

Write paper on understanding ISO and NIST guidelines.  Which method would you recommend to an organization (Target Company) that was building a security framework for their organization. Also justing why you chose one method over the other.