The agency developed an online comment tool to release future controls and assessment procedures concurrently to keep pace with evolving cyber threats.