For high security databases the controller performs penetration tests of the database systems against external and internal threats at least every 18 months, discusses the results and fixes the faults.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.