An organization responsible for creating or modifying a controlled access point. The agency is responsible for application and interpretation of the rules it creates and/or uses. The agency may also be responsible for the creation and maintenance of identifiers within its domain.