The organization documents the results of incident response tests.
No STIG checks reference this CCI.