GenAI is not incorporated into business processes without an approved business case that follows these Guidelines. General staff access to GenAI tools is not permitted until the Department has carried out the relevant business and risk assessments, has appropriate usage policies in place and has run staff awareness programmes on safe use; consistent with NCSC advice, access is restricted by default and allowed by exception on an approved business case.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.