The institution mitigates the risk posed by IT staff, third-party staff, consultants and temporary personnel through background checks covering prior experience, credentials, qualifications and criminal records, identity confirmation from government identification and character references, uses job descriptions kept current by managers with HR, employment agreements for sensitive positions, training and awareness to increase accountability, documents and confirms each person's access privileges against the job description with a timely process to review, update and remove privileges, and obtains signed confidentiality, nondisclosure and authorised-use agreements as a condition of employment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.