Because privileged utility programs in the cloud environment may override system and application controls, a B/D asks the provider for their functional specifications and makes sure controls govern their use when they access the cloud service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.