Determine and document the organization-defined authority that permits the organization-defined processing of personally identifiable information.
No STIG checks reference this CCI.