Master Assessment Datasheet
DoD has defined the frequency as reviewed annually - updated as appropriate.
The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate.
DISA Compelling Evidence
1. Documented Security Planning Procedures review process/methodology exists. 2. Procedure includes reviewing the security planning procedure at least annually - updates as appropriate.