The FI should adopt algorithms from well-established international standards and choose algorithms and key lengths that meet its security objectives; ensure random seeds and numbers are of sufficient length and randomness where security depends on them; use only algorithms that have been rigorously tested or vetted; and monitor developments in cryptanalysis, updating algorithms or increasing key lengths so they stay resilient against evolving threats.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.