organization-defined frequency

A control-tailoring placeholder — specifically an *organization-defined parameter* (ODP) of the temporal type — embedded in the statement of a security or privacy control to indicate that the implementing organization must supply a concrete time interval (e.g., quarterly, annually) before the control can be operationalized. It represents the variable part of a control or control enhancement that can be instantiated by an organization during the tailoring process by either assigning an organization-defined value or selecting a value from a pre-defined list provided as part of the control or control enhancement. Across the NIST SP 800-53 and SP 800-171 families it appears wherever a standard mandates a periodic action — review, update, assessment, reporting — but intentionally leaves the cadence unspecified so that each organization can calibrate it to its own risk posture; a key aspect of these publications is the inclusion of organization-defined parameters (ODPs), which allow organizations to tailor select security controls to specific security requirements, as determined by unique organizational risk management strategies. A superior authority (e.g., a regulatory overlay such as

Advisory only. A term this product ships is defined by an authority document, not by a search result.