Such program shall be based on a threat and risk assessment by expert(s) in the relevant field, and shall ensure the confidentiality of its p rocedures and security of its information systems regardless of the physical location of the APMU  personnel at the time of Passport  management, such as when the APMU  manager is physically located in an ADO , another Laboratory  or when travelling.