New guidance expands the framework to consider organizations beyond critical infrastructure; it also addresses governance and supply chain cybersecurity.
The ground up upgrade takes a model driven approach, with predefined components expressed in YAML. These can be mixed and matched to build a sandbox, so upgrades are available sooner to sandbox users.