Management's policies govern the secure storage of sensitive information on systems, media and paper through physical, logical and environmental controls, classify and inventory stored information for retrieval and update the inventories, apply stronger integrity controls such as integrity checkers and hashes to system documentation, source code and production data, log and monitor access to stored information, have security staff, audit and data owners review access rights periodically, and control portable devices with encryption, host access controls, homing beacons, remote deletion and data loss prevention.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.