This objective verifies that your organization has formally authorized all system connections that process, store, or transmit Controlled Unclassified Information (CUI). You must ensure each connection is approved before it becomes operational and that authorization is documented and traceable.