The organisation determines the security screening requirements for all positions, establishes screening criteria for the people filling them, and reviews and updates the requirements at a set frequency. No enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.