Title
The organization reviews and updates the access control policy in accordance with organization-defined frequency.
Description
The policy will address purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.