The organization defines the security functions of the information system to be isolated from nonsecurity functions.
No STIG checks reference this CCI.