This objective ensures your organization’s documented communication session protections are actively in use—specifically that sessions involving Controlled Unclassified Information (CUI) are authenticated, verified, and protected in real-world operations.