Practical approaches to implementing NIST Cybersecurity Framework

We're adopting the NIST Cybersecurity Framework in our organization. I'm looking for practical advice on implementation, particularly for a medium-sized business with limited security resources. What were your first steps? How did you prioritize the controls? What tools have you found helpful for managing and tracking compliance?