RSA Token required for secured ITBA access; issuance, custody, deactivation, and replacement procedures mandated. The policy mandates RSA SecurID tokens as mandatory second factor authentication for ITBA/ITD access; tokens are bound to employee identifiers, a PIN is communicated after binding, and no centralized login is permitted without both token and PIN. Distribution, training, updates, custody registers, spare stock management, and lifecycle procedures (leave, transfer, retirement, suspension, death) are managed by designated CIT(Admin & CO)/Pr. CCIT offices and Building in Charge officers, with the RSA Token database centrally maintained and deactivation required within 24 hours of loss or relevant events.