How is it protected?

The ACID is protected by your password. When an ACID is used to sign onto a system, a password must also be entered to validate your ownership of the ACID.

When you receive your account, the password is expired and must be changed the first time you sign on.