You’re making a huge assumption about NIST’s implementation. Generally people like the goals of regulation. They might not like the implementations. I’d prefer

You’re making a huge assumption about NIST’s implementation. Generally people like the goals of regulation. They might not like the implementations. I’d prefer to see strategic action on concrete issues rather than perceived risks. I don’t see how tasking a bunch of government agencies with pontificating on new and unfamiliar technologies can produce a good result.