Before provisioning, and unless already authorized under Part 4.1, authorize based on need, except for CIP Exceptional Circumstances, provisioned electronic access to electronic BES Cyber System Information and provisioned physical access to physical BCSI (access means both the ability to obtain and to use BCSI; provisioned access is the result of specific actions such as keys, cards, accounts or encryption keys).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.