Restrict the organization-defined processing of personally identifiable information to only that which is authorized.
No STIG checks reference this CCI.