The organization reviews the incident response plan on an organization-defined frequency.
No STIG checks reference this CCI.