Management controls the risks of development, test and quality assurance environments: privacy and misuse where production data are copied, security disabled or omitted for speed, data corruption where non-production and production data are not segregated, vulnerabilities carried into production when production-level security is not enabled, secondary uses such as training that expose sensitive data, and breaches where poorly secured environments become a conduit into production, with segregation, security and data protection appropriate to each environment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.