The organization establishes privacy responsibilities for service providers.
No STIG checks reference this CCI.