NIST SP 800-66 Rev 2 164.316(b)(2): Time Limit, Availability, and Updates (Required)

Retain documentation for six years from creation or last effective date, make it available to those responsible for implementation, and review and update periodically as needed.