Control: ism-1818; Revision: 1; Updated: Mar-23; Applicability: ALL; Essential Eight: N/A Authentication and authorisation of clients is performed when clients call web APIs that facilitate modification of data.