OSCAL Parameters within AC-1: Policy and Procedures
the frequency at which the current access control procedures are reviewed and updated is defined;