Review and update the current supply chain risk management policy on an organization-defined frequency.