The organization maintains rules authorizing the terms and conditions of software program usage on the information system.
No STIG checks reference this CCI.