Each business case weighs the requirements of every key stakeholder group (the data office and governance leads, risk and finance, business data producers and consumers, technology and architecture heads, cloud project teams and engineers, privacy, cyber, legal, compliance and audit, analytics teams, and the cloud providers themselves), is approved by all key stakeholders who know their supporting role, and is reviewed at a set frequency against the business, data and cloud strategies it was founded on. Cases are structured and versioned so they can be audited, changes need approval by stakeholders with sufficient authority, legal requirements are always met, and an oversight mechanism (automated controls, workflow, governance reviews or tollgates proportionate to risk appetite, regulation and size) shows that data held in the cloud, whether created there, stored there or migrated there, meets the cases' requirements and risk-mitigation intent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.