My company doesn't ever use paper CUI. Any CUI that would come in to the company would be handled and stored digitally. Consequently, we are planning to write in the PE section of our SSP that it is our policy not to authorize the printing or storage or any physical CUI, that we provide employees with specific training instructing them not to handle physical CUI, and that will have our in-scope systems configured to prevent connections to any printers. Is that allowed or would we be required to still have the capability to handle physical CUI?