Develop, approve and maintain a list of individuals authorised to access the facility where the system resides, issue facility access credentials, review the list annually and on personnel changes, and remove individuals whose access is no longer required.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.