Industry colleague:

I was able to get NIST updated five times before I could get our corporate policy updated