This objective requires your organization to identify the methods, technologies, and practices used to protect system boundaries—particularly where Controlled Unclassified Information (CUI) flows between internal and external networks or systems.