Appropriate security controls (including encryption, key management and monitoring) are enabled and evidence of their operation is recorded for sensitive data in the cloud.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.