The organization audits privacy controls, per organization-defined frequency, to ensure effective implementation.
No STIG checks reference this CCI.