Defines the frequency organization-defined personnel or roles will review and approve the incident response plan.
No STIG checks reference this CCI.