Because cloud services are reached from many devices and channels, services offering two-factor authentication are preferred and it is enabled for as many accounts as possible, privileged accounts first, using options such as one-time passwords, biometrics or digital certificates. User access, especially privileged access, is limited to dedicated workstations, networks or locations, and the e-Authentication Framework published by the Digital Policy Office is followed in setting the electronic authentication requirements of cloud services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.