OSCAL Parameters within RA-3.1: Supply Chain Risk Assessment
the frequency at which to update the supply chain risk assessment is defined;