This objective ensures your organization has formally documented the use of cryptographic methods that protect Controlled Unclassified Information (CUI) as it is transmitted across networks. The documentation must clearly state where, how, and with what protocols or tools CUI is protected while in transit.