Most (virtually all) of these rules "chain-up" to what NIST says is best practice.

So when NIST does a final update, (the above is just a draft of their new standards) EVERYONE(-ish) will follow (eventually).