Authorize internal connections of components able to process, store or transmit CJI, document for each the interface characteristics, security and privacy requirements and the nature of the information communicated, terminate connections no longer required or authorized, and review the continued need for each at least annually.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.