Develop security and privacy plans for the system that provide the security categorization of the system, including supporting rationale.
No STIG checks reference this CCI.