Intermediate control principles for data protection (required, with baseline, of an AI whose inherent risk is medium). Data loss prevention covers outbound communications (e-mail, file transfer, large transfers); mobile device management includes integrity checks such as jailbreak and root detection and, where devices connect to the corporate network, remote software and patch validation; tools prevent unauthorised access to or exfiltration of confidential data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.