OSCAL Parameters within AC-1: Policy and Procedures
the frequency at which the current access control policy is reviewed and updated is defined;