Require the developer of the system, system component, or system service to implement a plan for ongoing privacy control assessment.
No STIG checks reference this CCI.