SR-2: Supply Chain Risk Management Plan

systems, system components, or system services for which a supply chain risk management plan is developed are defined;

the frequency at which to review and update the supply chain risk management plan is defined;