<<Control Measure>> Users should not access an application until sufficient level of trust is established ()