It's a long road ahead, but federal agencies and contractors are laying the groundwork to implement NIST's latest framework to protect federal information.