Defines the frequency on which the list of authorized software programs will be reviewed and updated.
No STIG checks reference this CCI.