This objective requires your organization to identify which personnel must receive security awareness training, with specific attention to users who access or interact with Controlled Unclassified Information (CUI). It ensures that you’ve scoped training to the appropriate individuals.