This objective confirms that your physical access control systems—badge readers, locks, alarms, surveillance—are not only documented and operational, but actively enforced. It ensures your organization uses and monitors these controls to prevent unauthorized access to systems that store, process, or transmit Controlled Unclassified Information (CUI).