OSCAL Parameters within AT-3.5: Processing Personally Identifiable Information
the frequency at which to provide refresher training in the employment and operation of personally identifiable information processing and transparency controls is defined;