# SBA - 22-19 - 8
> **Open** recommendation · 2022-09-27
**Report:** COVID-19 and Disaster Assistance Information Systems Security Controls ([detail](https://api.ai-analytics.org/ig-report/33372))
**OIG report number:** 22-19
**Recommendation number:** 8
## Text
Review and update POA&Ms at least quarterly as required by SOP 90 47 6.
---
*Source: oversight.gov · AI Analytics · CC0 1.0*