For termination actions, change passwords for shared accounts known to the user within 30 calendar days; for reassignments or transfers, within 30 calendar days of determining the access is no longer needed; where documented extenuating operating circumstances require longer, within 10 calendar days after they end.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.