The organization determines the organization-defined list of critical information system components that require re-implementation.
No STIG checks reference this CCI.