Designate an organization-defined official to manage the development and documentation of the risk assessment policy.
No STIG checks reference this CCI.