The organisation develops, approves and maintains a list of individuals authorized to access the facility housing the system, issues access credentials, reviews the list at a set frequency, and removes individuals no longer needing access. The GC discussion requires an identification card for all personnel showing the organisation, the bearer's name and photo, a unique number and an expiry date, protected as personal information. 4 enhancements, including the Canada-specific (400) Identification card requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.