Review and update the supply chain risk management plan on an organization-defined frequency, or as required, to address threat, organizational or environmental changes.
No STIG checks reference this CCI.