The latest edition of the ISM, published by the ACSC, adds a new control "to ensure clients are authenticated when calling web application programming interfaces that facilitate access to data not ...