Management has termination and off-boarding procedures that identify who decides to terminate a vendor relationship with approval and acknowledgment by the contracted parties, negotiates termination clauses covering fourth and nth parties and the confidentiality, integrity, availability and resilience of data and operations through off-boarding, and runs procedures for shutdown, task identification, data preservation or disposal and secure disposal of unneeded hardware and software, with critical and sensitive data and documents wiped or destroyed logically and physically before disposal, including data a third party holds on the entity's behalf.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.