Develop and document access agreements for organisational systems, review and update them at least annually, and verify that individuals sign the appropriate agreements before access and re-sign when the agreements are updated or signatories change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.