Identify and document where CJI is located and the specific components on which it is processed, stored or transmitted, identify and document the users with access to CJI and those components, and document changes to the location of CJI.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.