Defines the events for reviewing and updating the organization-wide information security program plan.
No STIG checks reference this CCI.