New risk standard update – too little, too late?

New risk standard update – too little, too late?