Authorize access to security functions (establishing accounts, configuring permissions, setting audited events and intrusion detection parameters) and to security-relevant information in hardware, software and firmware only for privileged personnel such as security, system and network administrators, maintainers and system programmers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.