The organization defines the information system responses and alternative action(s) to anomalies discovered during security function verification.
No STIG checks reference this CCI.