The organization permits actions to be performed without identification and authentication only to the extent necessary to accomplish mission/business objectives.