Appearance
System owners report the security status of each system to its authorising officer at least annually.