For organization-defined system components, load and execute organization-defined applications from hardware-enforced, read-only media.
No STIG checks reference this CCI.