This objective ensures that your organization’s documentation of authorized users matches your live system access—and that only properly approved individuals have access to systems processing Controlled Unclassified Information (CUI).