requirements for periodic reviews, managementRequired oversight, and configuration management.
391019
They have requirements for periodic reviews.
391020
The requirements are set and will not be reviewed.