Please follow https://www.uspsoig.gov/document/arrow-key-management-controls.