This control requires your organization to protect and actively monitor your facilities and infrastructure that support systems processing Controlled Unclassified Information (CUI). This includes physical buildings, wiring closets, server rooms, HVAC systems, power supplies, and other assets critical to your secure IT environment.