Entity personnel establish and maintain data inventories recording storage location, criticality and sensitivity, implement controls consistent with those characteristics, such as a policy that highly sensitive data are not used in development and test environments and synthetic data are used instead, and document system data use so that security engineers can protect data throughout process execution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.