This objective ensures your organization has formally documented all publicly accessible systems, including those that handle or connect to systems containing Controlled Unclassified Information (CUI). The documentation should show what systems are exposed, where they reside, and what functions they serve.