Require that the developer of an organization-defined system, system component, or system service satisfies organization-defined additional personnel screening criteria.
No STIG checks reference this CCI.