Review and update the risk management strategy in accordance with organization-defined frequency or as required, to address organizational changes.
No STIG checks reference this CCI.