The organization describes whether the organization shares personally identifiable information (PII) with external entities.
No STIG checks reference this CCI.