Extends ISO/IEC 27002:2022 5.14. When physical media are used for transfers, a system records the media containing PII coming in and going out, with the media type, authorised sender and recipients, date and time, and number of items; where possible customers are asked to add protection such as encryption so the data can be read only at its destination and not while in transit.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.