ISO/IEC 27002:2022 control 6.1 applies, with telecommunications guidance: consider thorough checks on applicants for roles with access to sensitive information, and apply the same care to roles giving access to telecommunications equipment or communications information, because such access can open up data without limit, and data can become sensitive once aggregated. Anyone working on the critical national infrastructure side of communications systems should undergo formal screening and a criminal records check before being given access.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.