Defines the frequency on which the list of unauthorized software programs will be reviewed and updated.
No STIG checks reference this CCI.