CPS4.5.1 Obliged to revoke on compromise. CPS4.9.1 Authorised to revoke. CPS4.9.2 Mechanism for revoking. CPS5.4,5.5.1 Recorded in audit log, archives.