Using a framework to find gaps in your organization is a great way to improve your security posture. Have you thought about using the same framework with your clients? I think you find this discussion with Jim Harryman of Kinetic Technology Group a real eye-opener to the opportunities you have to reduce risk within your own company and that of your clients.
Support this podcast: https://podcasters.spotify.com/pod/show/msp1337/support)