Take organization-defined least-disruptive actions to terminate suspicious events.
No STIG checks reference this CCI.