How long did it take you (your org) to be "fully compliant" with your IT Security targets? (From square 0, to done) Months? Years? etc

Hey trying to get perspective on other examples of implementation of things like NIST 800-171, or other frameworks (external audit/certification included or not), from zero to hero (fully compliant/met).

What has it been like for you guys? If you could talk about these parameters it would help:

* Target framework(s)
* How many days/months/years from absolute starting point to "we're 100% compliant and up to speed"
* How much staff/endpoints
* Size of your team
* Anything else you think …

cybersecurity etc it security org security