This objective requires your organization to identify all devices used to manage, control, or enforce physical access to areas where Controlled Unclassified Information (CUI) is stored or processed. These include both active controls (like badge readers or keypads) and passive controls (like locks or card systems).