OSCAL Parameters within IR-1: Policy and Procedures
the frequency at which the current incident response policy is reviewed and updated is defined;