Review and update the organization-wide information security program plan on an organization-defined frequency.
No STIG checks reference this CCI.