Where its Risk Assessment shows this to be appropriate, the Licensee creates, applies and maintains procedures for disposing securely of Nonpublic Information, whatever form it takes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.