The asset owner shall define and apply retention periods for IACS data, including logs and backups, so that data is kept as long as needed and no longer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.