The organization documents user roles and responsibilities with regard to external information system services.
No STIG checks reference this CCI.