This objective ensures your organization has formally documented the methods you use to protect the authenticity of communications sessions, especially those involving Controlled Unclassified Information (CUI). This documentation must explain how session integrity and identity verification are enforced.