Management implements or enables database controls commensurate with the sensitivity of the data, including encryption, controls user access under least privilege with authorisations tailored to each person, strengthens authentication and monitoring for application accounts whose broad access could expose large data sets, and makes the database's security features part of a layered security program.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.