Because of Felicity's job title, she has broader authorization to access, use, and update company data than Charity, a colleague with a different job title. Who developed the standards that define their authorization levels?