This is what it lists in CCS VM user guide (pg 32)
Symantec Control Compliance Suite Vulnerability Manager keeps the database current through a subscription service that maintains and updates vulnerability definitions and links. Symantec Control Compliance Suite Vulnerability Manager contacts this service for new information every six hours.