↑↓ to move, Enter to open, Esc to close. Try 3.5.3, AC.L2-3.1.1, MFA or unmarked.
Screen individuals before authorizing access to systems.
Personnel security has two requirements: screen people before they get access, and remove that access when they leave or move. Both are simple to state and often weakly evidenced.