OSCAL Parameters within SR-2: Supply Chain Risk Management Plan
the frequency at which to review and update the supply chain risk management plan is defined;