The organization includes a determination of information security requirements for the information system in business process planning.
No STIG checks reference this CCI.