This objective ensures your organization has formally documented the physical access controls that protect systems storing, processing, or transmitting Controlled Unclassified Information (CUI). This includes doors, locks, access cards, guards, cameras, and any other mechanisms that restrict physical entry to sensitive areas.