Keep visitor access records for the facility for one year, review them quarterly, and report anomalies to the physical and environmental protection personnel and the information security personnel.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.