Advanced control principles for cyber forensics (required, with baseline and intermediate, of an AI whose inherent risk is high). Evidence is protected by encryption, least-privilege and role-based access (including over forensic tools, audit configurations and logs), real-time alerts on unauthorised access attempts and cryptographic integrity protection; retention periods for digital and forensic evidence are set by risk appetite to support later investigations; evidence storage has named administrators, capacity warnings and backups to different systems or media.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.