The program has four aims: to keep Nonpublic Information secure and confidential and keep the Information System secure; to guard against threats or hazards that could compromise the security or integrity of both; to prevent Nonpublic Information from being accessed or used without authorization and keep to a minimum the chance of any Consumer being harmed; and to set, and re-evaluate from time to time, a retention schedule for Nonpublic Information together with a way of destroying it once it is no longer required.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.