Management considers the uses and risks of data analytics, limits access to analytics tools and outputs, designs or selects tools for confidentiality, integrity and availability, inventories the data sources and classifies and secures them by risk, sets design requirements and parameters, ensures users can interpret dashboards and reports, documents data types, owners, users and report purposes, determines stakeholder needs, opt-in considerations and disclosure requirements after an incident, implements access controls and activity monitoring over tools and reports, and defines processes to remove or destroy data no longer used.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.