The authorized user is responsible for maintaining the confidentiality of processed data and for adopting the necessary security measures to prevent unauthorized access or improper use throughout the validity period of their credentials. Therefore, the user must log out whenever leaving the device used to access the system unattended.