Require that providers of external system services comply with organizational security requirements.
No STIG checks reference this CCI.