This objective ensures that your organization’s session authenticity protections are mandatory, consistent, and actively enforced across all communications paths involving Controlled Unclassified Information (CUI)—making it impossible for unauthorized or unauthenticated sessions to occur.