This objective ensures your organization maintains documented records of portable storage device authorizations and that those records include ownership information—clearly linking each device to a specific user, role, or department.