Review and update the current risk assessment policy in accordance with organization-defined frequency.
No STIG checks reference this CCI.