Defines the frequency with which to review and update the current system and services acquisition policy.
No STIG checks reference this CCI.