Carried first-edition guidance. Matching the identified risks, the CSC authenticates its cloud service administrators to the service's administrative functions with sufficiently strong techniques such as multi-factor authentication, and the CSP offers those techniques, for example its own multi-factor authentication or support for a third-party mechanism.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.