The organization defines the frequency for auditing privacy controls and internal privacy policy to ensure effective implementation.
No STIG checks reference this CCI.