For medium and high security databases the procedure also covers identification and authentication, monitoring of use and access documentation, periodic audits, backup, and how development work is carried out and documented including developer access to data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.