The system uniquely identifies and authenticates organisational users and associates that identity with processes acting for them. The GC discussion says TBS identification and authentication requirements can satisfy this. 14 enhancements, including the Canada-specific (400) MFA for remote access to privileged accounts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.