This control requires your organization to implement protections to ensure that Controlled Unclassified Information (CUI) stored on any system component remains confidential, even if a device is lost, stolen, or accessed by unauthorized users.