The organization identifies and documents (as appropriate) explicit rules to be enforced when governing the installation of software by users.
No STIG checks reference this CCI.