Recent changes have been made to the policy suite. Departments are introducing new entity-level controls around IT, which President Brison spoke about, and business processes. They have a timeline to be able to implement that.
On May 18th, 2017. See this statement in context.