To ensure HSM integrity and timely access to services:
1. The HSM must not remain in Authorised State or Secure State inadvertently.
2. If either state is active when it is not required to be active, the HSM must immediately either be switched off or returned to the User State. Subsequent re-activation of Authorised or Secure State will require the authorised officers to re-input their authorisation.