Defines the external organizations from which it receives information system security alerts, advisories, and directives.
No STIG checks reference this CCI.