The organization documents the system and communications protection policy.
No STIG checks reference this CCI.