Review and update the current supply chain risk management policy following organization-defined events.
No STIG checks reference this CCI.