When individuals are reassigned or transferred, review and confirm the continuing need for their logical and physical access, close and establish accounts and change authorisations within 24 hours, modify access to match the new operational need, and notify the information security, personnel security, account management personnel and administrators before the transfer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.