The organization develops an anti-counterfeit policy that includes the means to prevent counterfeit components from entering the information system.
No STIG checks reference this CCI.