PM-17: Protecting Controlled Unclassified Information on External Systems

the frequency at which to review and update the policy is defined;

the frequency at which to review and update the procedures is defined;