Retain records of configuration-controlled changes to the system for an organization-defined time period.
No STIG checks reference this CCI.