This objective ensures that technical controls are in place to verify that only authorized mobile devices are allowed to access systems containing Controlled Unclassified Information (CUI). Authorization must occur before the device is granted access.