The organization audits its staff on the authorized sharing of personally identifiable information (PII) with third parties.
No STIG checks reference this CCI.