NIST is being revised, expect more focus on risk management.