The organization establishes access requirements for service providers.
No STIG checks reference this CCI.