Customer awareness and education for retail and commercial account holders explains the protections Regulation E does and does not give and which online accounts it covers, states that the institution will never ask for log-in credentials by phone or email, lists the controls and prudent practices customers should adopt, suggests that commercial customers periodically assess their own risks and controls, recommends technical and business controls against fraud such as business email compromise, and gives customers a way to report suspicious account activity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.