Industry colleague: I was able to get NIST updated five times before I could get our corporate policy updated