Review and update the current access control policy on an organization-defined frequency.
No STIG checks reference this CCI.