A B/D knows how complete and effective the mechanisms are that find and securely erase data before equipment such as disks and backup media is disposed of or re-used, since multi-tenant public cloud may not support secure destruction easily. Secure destruction on expiry or termination of service, on government request, or on re-use of equipment is a selection criterion for external providers; sensitive data is deleted in line with industry practice such as ISO 27001 secure disposal and the YDB144-2014 data destruction clause; the provider has procedures to erase government data securely on all its platforms and confirms erasure in writing; and security audit reports are obtained periodically to confirm the requirement is met.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.