NIST AI Risk Management Framework 1.0 readiness for professional services. Realistic timelines, costs, and the controls that fail audits in this vertical.