Where a mainframe is used, management implements role-based access control, segregation of duties and multifactor authentication, password complexity, inactivity timeouts and login restrictions, encryption of sensitive information, activity logging of user access, failed logins and security setting changes, real-time monitoring and alerting, timely patching, regular security auditing that validates privileges, roles and access profiles and removes excess access, and independent close monitoring of system and security administrator accounts, using the access control security tools available for mainframe resources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.