That’s a good point. There’s law and then there’s administrative policies.
I agree with the assertion that the mandate was probably more in CISAs realm.
In the end, it needed to happen. Maybe administrations will consider being less petty and just doing what everyone knows needs to be done. Ha ha. Right.