Develop security and privacy plans for the system that include risk determinations for security and privacy architecture and design decisions.
No STIG checks reference this CCI.