Defines the authority who will permit the organization-defined processing of personally identifiable information.
No STIG checks reference this CCI.