Validate all requests: Use tokens like OAuth and JWT to authenticate requests between services ... Update documents annually ...