This objective ensures your organization has formally documented the physical access control systems that protect areas where Controlled Unclassified Information (CUI) is stored, processed, or transmitted. This includes everything from badge readers to locked cabinets—any system that restricts or monitors physical access.