OSCAL Parameters within PM-17: Protecting Controlled Unclassified Information on External Systems
the frequency at which to review and update the policy is defined;