Develop an incident response plan that is reviewed and approved by organization-defined personnel or roles on an organization-defined frequency.
No STIG checks reference this CCI.