{"data":{"id":"us/32-cfr-148.3","jurisdiction":"us","citation":"32 CFR 148.3","heading":"Security review.","body":"After initial security authorization, approval, certification, or accreditation, subsequent security reviews shall normally be conducted no more frequently than annually.\nAdditionally, such reviews shall be aperiodic or random, and be based upon risk management principles. Security reviews may be conducted “for cause”, to follow up on previous findings, or to accomplish close-out actions. Visits may be made to a facility to conduct security support actions, administrative inquiries, program reviews, and approvals as deemed appropriate by the cognizant security authority or agency.","path":["Title 32—National Defense","Subtitle A—Department of Defense","CHAPTER I—OFFICE OF THE SECRETARY OF DEFENSE","SUBCHAPTER D—PERSONNEL, MILITARY AND CIVILIAN","PART 148—NATIONAL POLICY AND IMPLEMENTATION OF RECIPROCITY OF FACILITIES","Subpart A—National Policy on Reciprocity of Use and Inspections of Facilities"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"e98070b1f1296eb24bbacea7bc730c255a4533d948e29350d319722f39e71bf7","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-148.2","next":"us/32-cfr-148.4"},"notice":"GroundRules: Original legal text. Not legal advice."}