The organization defines the external boundary of the information system.
No STIG checks reference this CCI.