This objective ensures your organization has formally documented the tools and methods you use to detect unauthorized system use, specifically for systems that process, store, or transmit Controlled Unclassified Information (CUI).