This objective requires your organization to identify how Controlled Unclassified Information (CUI) is protected during physical or digital transport. Whether data is sent via courier, email, VPN, or removable media, you must have clear security controls in place to prevent unauthorized access, loss, or interception.