The organization requires third-party providers to comply with personnel security policies and procedures established by the organization.
No STIG checks reference this CCI.