System and Communications Protection activities ensure the organization is actively identifying, managing, and controlling all system and communication channels that store or transit controlled, unclassified information. (CUI)