Control Plan

Risk: IF an outside actor with malicious intent obtains a valid certificate through social engineering AND uses it to send an illegitimate CAP-compliant message by spoofing an AOS, THEN health, safety, legal, financial, and reputation consequences could result.