NIST framework alignment gives cyber insurance underwriters a common language for security maturity. Here is how that mapping actually works in practice.