This objective requires your organization to identify all remote access sessions that allow users to connect to systems handling Controlled Unclassified Information (CUI) and ensure those sessions are encrypted using approved cryptographic methods.