Review and update the list of unauthorized software programs per organization-defined frequency.
No STIG checks reference this CCI.