The organization trains its staff on the consequences of unauthorized use or sharing of personally identifiable information (PII).
No STIG checks reference this CCI.