The information system enforces a role-based access control policy over organization-defined objects.
No STIG checks reference this CCI.