The organization defines the external reporting organizations to which counterfeit information system components are to be reported.
No STIG checks reference this CCI.