Requirement:

The asset owner shall have policies and procedures related to periodically reviewing the SP to: a) verify that it is being properly applied, b) validate that the technical and process security measures continue to meet the system security requirements, c) address changes in the organization and its processes, technical changes in the Automation Solution and changes in the threat environment, and d) make improvements, as appropriate.

Guidance: