A process to ensure that individuals with authorized electronic or authorized unescorted physical access have had a personnel risk assessment under Parts 3.1 to 3.4 completed within the last seven years.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.