This objective requires your organization to identify and document who is authorized to perform maintenance on systems that store, process, or transmit Controlled Unclassified Information (CUI). These individuals must be vetted, assigned appropriate access, and listed by role or name.