This objective requires your organization to identify how you control and monitor communications where systems connect to external networks or between internal system boundaries—especially where Controlled Unclassified Information (CUI) is transmitted.