This control requires your organization to supervise any maintenance personnel—internal or external—while they are performing maintenance on systems that store, process, or transmit Controlled Unclassified Information (CUI). Supervision helps reduce the risk of unauthorized access, data exposure, or system compromise during elevated-access activities.