The organization develops procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls.