Develop security and privacy plans for the system that identify any relevant control baselines or overlays, if applicable.
No STIG checks reference this CCI.