This objective requires your organization to identify how you monitor for unauthorized use of systems, especially systems that store, process, or transmit Controlled Unclassified Information (CUI). These mechanisms must detect suspicious or policy-violating activities.