Require external providers to comply with personnel security policies established by the organization.
No STIG checks reference this CCI.