Revised requirements, and what organisations need to prepare