The organization implements controls to protect personally identifiable information (PII) used for testing.
No STIG checks reference this CCI.