Frameworks for Non-Profits

Hi u/cybersecurity,

I currently work for a charity that is less than two years old and I'm currently looking into cyber frameworks, currently, I've looked at CIS Controls, NIST CSF, ISO 27001. I know all three frameworks focus on risk but I am stuck on choosing one and was curious for people's views.

​

Also, can someone explain to me what each one focuses on?

charity cis cis controls controls csf cyber cybersecurity focus frameworks iso iso 27001 nist nist csf non non-profits old people risk work