The organization defines the frequency, minimally biennially, on which the privacy plan, policies, and procedures are to be updated.
No STIG checks reference this CCI.