Authorize access to the system based on organization-defined attributes (as required).
No STIG checks reference this CCI.