NIST CSF 2.0 calls for a hierarchy of executives, managers, and practitioners not stated in the previous version.