Require that providers of external system services comply with organizational privacy requirements.
No STIG checks reference this CCI.