Defines response times for remediating legitimate vulnerabilities in accordance with an organization assessment of risk.
No STIG checks reference this CCI.