AC.L2-3.5.2[c] — The identity of each device accessing or connecting to the system is authenticated or verified as a prerequisite to system access.