Access controls, technical and where appropriate physical, are implemented and periodically reviewed to authenticate and permit access only to authorised users so as to protect against unauthorised acquisition of customer information, and to limit authorised users to the customer information they need for their duties and functions, or, for customers, to their own information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.