The organisation manages authenticators by verifying the recipient's identity at initial distribution, setting initial content for issued authenticators, ensuring sufficient strength for intended use, operating procedures for initial distribution, loss, compromise, damage and revocation, changing defaults before first use, changing or refreshing them at set periods or after defined events, protecting their content, requiring individuals and devices to protect them, and changing group or role account authenticators when membership changes. The GC discussion recalls the Privacy Act duty to keep personal information used for administrative purposes accurate and current. 18 enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.