Review and update the supply chain risk management strategy on an organization-defined frequency or as required, to address organizational changes.
No STIG checks reference this CCI.