ISO/IEC 27002:2022 control 6.2 applies, with telecommunications guidance: law and regulation lay down what employees are entitled and obliged to do about keeping communications, essential communications included, from being disclosed, and this should be reflected; alongside protecting PII and other confidential information, the terms and conditions should set out duties for keeping the communications service running; and everyone working on the services should be kept informed and current about their duty to protect users' PII and confidential information and to keep secret whatever they learn in the course of operations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.