The organization conducts an initial evaluation of personally identifiable information (PII) holdings.
No STIG checks reference this CCI.