The organization audits internal privacy policy, per organization-defined frequency, to ensure effective implementation.
No STIG checks reference this CCI.