This objective ensures your organization’s monitoring for unauthorized use is not optional or easily bypassed—it must be technically enforced, resilient, and actively protecting systems that handle Controlled Unclassified Information (CUI).