OSCAL Parameters within SR-6: Supplier Assessments and Reviews
the frequency at which to assess and review the supply chain-related risks associated with suppliers or contractors and the systems, system components, or system services they provide is defined;