N.Y. Comp. Codes R. & Regs. tit. 6, § 383-9.8
(b) Institutional control must be performed in accordance with the institutional control plan approved by the department pursuant to Subparts 383-3 and 383-5 of this Part. The institutional control plan must include:
(8) any other information required by the department.
(c) Annual revision of the institutional control plan.
(2) The revision must take into account relevant new information including the following: