No. The quarterly release schedule describes how frequently the SCF is maintained and published, not an automatic requirement to redesign an organization's existing controls.
Organizations should evaluate changes for applicability, assess their potential impact and incorporate relevant updates through established governance and change management processes. Applicable legal, contractual and certification requirements may impose separate obligations or deadlines.
Many updates involve regulatory mappings, implementation guidance, editorial improvements or other changes that do not alter the underlying intent of existing controls. Substantive changes should be evaluated to determine whether existing documentation and implemented practices remain sufficient.
%20(white).png)
.png)