The organization defines approved authorizations for controlling the flow of information within the system.
No STIG checks reference this CCI.