Implement preventive and detective controls commensurate with the potential impact of data being compromised, establishing risk tolerance and selecting controls to bring risk within the risk appetite.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.