OSCAL Parameters within SR-1: Policy and Procedures
the frequency at which the current supply chain risk management procedure is reviewed and updated is defined;