Because insiders can circumvent controls with their knowledge, the institution screens the background of staff and third-party personnel with access to data and systems, privileged access above all, with the depth of screening scaled to the access given, and puts tooling and processes in place to watch for insider risk such as data exfiltration and resource abuse.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.