Apply organization-defined systems security and privacy engineering principles in the specification of the system and system components.
No STIG checks reference this CCI.