The control system shall initialize authenticator content, change all default authenticators on installation, change or refresh authenticators, and protect them from unauthorized disclosure and modification when stored and transmitted. RE 1 adds hardware protection for the identity credentials of software processes, which the held ISAGCA paper does not include at SL 2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.