An employer using electronic forms must implement an effective records security program that ensures only authorized personnel have access, provides backup and recovery against loss, trains employees to minimise unauthorized or accidental alteration or erasure, and creates a secure and permanent record of the date, identity and action whenever a form is created, completed, updated, modified, altered or corrected; known or reasonably foreseeable action or inaction causing unauthorized alteration, loss or erasure is a violation. An employee's electronic signature must be captured by a system that acknowledges the attestation was read, affixes the signature at the time of the transaction, creates and preserves a record verifying the signer's identity and gives a printed confirmation on request, failing which the form is not properly completed; the employer's or representative's electronic attestation should likewise acknowledge the attestation was read, and a failure to meet the signature criteria with no properly completed form at inspection is a violation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.