Defines the processing of the personally identifiable information to only that which is authorized.
No STIG checks reference this CCI.