CPS1.3.2-3, CPS3.2 refers to AP (COD13). CPS3.2.2 describes. CAveat: CPS3.2.3 refers validation of organisations to Organisation Assurance Policy. This is currently unreviewed. CPS4.1.1 who may be a Subscriber