Publication framework: this page is structured for PAR and should receive final legal/compliance review before public release.
01
Security by design
Security controls should be built into authentication, verification and account flows.
02
Access control
Authentication, authorization and least-privilege principles for protected functions.
03
Integrity
Mechanisms and operational controls intended to protect record and reference integrity.
04
Privacy and minimization
Collect and expose only information required for the relevant purpose.
05
Monitoring and response
Operational monitoring, incident response and recovery processes.
06
Responsible disclosure
A clear channel for reporting suspected vulnerabilities or security issues.