Currently, there is no firm timeline or hard transition deadline for moving to the cybersecurity scorecard 2.0, leadership says.