Defines the security functions that must be satisfied when the primary means of implementing the security function is unavailable or compromised.
No STIG checks reference this CCI.