This objective requires your organization to verify that wireless networks are technically configured to use encryption, consistent with your access control policies and procedures—especially when those networks support access to systems handling Controlled Unclassified Information (CUI).