The organization's security assessment plan describes assessment roles and responsibilities.
No STIG checks reference this CCI.