Australian Energy Sector Cyber Security Framework (AESCSF) ACCESS-1a: ACCESS-1a: Identities created for people, services and devices needing access

The organisation creates or registers identities, at least in an ad hoc way, for staff and for other entities such as services and devices that need access to assets; shared identities are not ruled out. Provisioning records the entity and attributes such as its role.