The organization conducts a privacy impact assessment on the information system in accordance with OMB policy.
No STIG checks reference this CCI.