The organization monitors security control compliance by external service providers.
No STIG checks reference this CCI.