Test the effectiveness of the incident response capability for the system on an organization-defined frequency using organization-defined tests.
No STIG checks reference this CCI.