OSCAL Parameters within SR-1: Policy and Procedures
the frequency at which the current supply chain risk management policy is reviewed and updated is defined;