After nine (long) years of waiting for this new revision, some security professionals were expecting the changes to be more extensive, but I believe that companies that are already certified against the 2013 revision will be relieved that the work to be done is not that big after all.