This objective confirms that your organization has not only documented and listed media types used to store or transmit Controlled Unclassified Information (CUI), but has also actively identified and categorized those media types in practice—across systems, platforms, and environments.