Coming from a company that has capital one as a customer. They are one of the dumbest related to security.

Banks are still in the stone age when it comes to NIST and cyber security.