Remediate legitimate vulnerabilities in organization-defined response times in accordance with an organizational assessment risk.
No STIG checks reference this CCI.