Review and update, on an organization-defined frequency, the configuration management policy.
No STIG checks reference this CCI.