As far as national law allows, the AEO checks recruits for prior security-related, Customs or criminal convictions, runs periodic or for-cause checks on security-sensitive staff, issues unique company identification that staff must carry, identifies and records visitors and vendors and deals with unidentified persons, promptly removes leavers' identification and physical and system access, and (new emphasis in 2025) maintains a practical, unambiguous Code of Conduct (Ethics) setting expected behaviour with measures for non-compliance. Customs applies equivalent identification and deprovisioning to its officers and may agree access to information on long-term personnel at AEO sites.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.