This control reinforces the requirement to limit access to Controlled Unclassified Information (CUI) stored on system media—specifically ensuring that only authorized users can access, read, write, or modify that information, whether the media is removable, internal, or virtual.