The 2019 NIST Risk Management Framework update incorporates a critical paradigm shift requiring greater C-suite involvement and oversight, bringing a formal preparation step to the process that permeates every level of the organization and requires that management drives assessment and authorization efforts going forward.