Defines the security attributes that are permitted for organization-defined systems.
No STIG checks reference this CCI.