The agency procures infrastructure in bulk and provisions it to teams as a platform with standard operating system, library and logging configurations, so that teams inherit organisational controls and common system security plan language, receive compliance alerts such as public or unencrypted storage, and work towards immutable workloads redeployed through pipelines; it maintains gold virtual machine and container images with the required logging and monitoring built in without overloading them, enforces regular patching, and provides encryption services (certificates for transport security, encryption at rest) and key and password management that rotates credentials on a schedule and can revoke compromised keys.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.