An MCDA implements security capabilities for its cloud services covering access control, confidentiality, integrity and availability; facilities for early detection, diagnosis and fixing of service and resource problems, secure logging of access records and activity reports, session monitoring and network packet inspection, and firewalling with detection and prevention of malicious attacks on the provider's systems, so that one user cannot disrupt another's use of the services; and intranet-grade security, VPN for example, on the link between the MCDA and the provider.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.