ACCESS domain. Control logical and physical access to assets commensurate with risk, including least privilege, privileged access management and remote access controls.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.