The organization defines the frequency for providing refresher security awareness training to all information system users (including managers, senior executives, and contractors).
Master Assessment Datasheet
DoD has defined the frequency as annually.
The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level (DoDD 8570.01). DoD has defined the frequency as annually.
DISA Compelling Evidence