The organization identifies unauthorized use of the information system.
No STIG checks reference this CCI.