Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and
(b) Reviews and updates the current:
Identification and authentication policy [FedRAMP Assignment: at least annually]; and
Identification and authentication procedures [FedRAMP Assignment: at least annually or whenever a significant change occurs].