CA-2: Control Assessments

the frequency at which to assess controls in the system and its environment of operation is defined;

individuals or roles to whom control assessment results are to be provided are defined;