Defines the frequency for reviewing and updating the current supply chain risk management policy.
No STIG checks reference this CCI.