This objective ensures that your organization’s control and monitoring protections at system boundaries are not only active, but strictly enforced—meaning communications cannot bypass security controls, and monitoring is continuous and cannot be disabled without authorization.