The organization defines the frequency at which each form of security control assessment should be conducted.
No STIG checks reference this CCI.