Verify at least once every 15 calendar months that every individual with provisioned access to BCSI has an authorization record and still needs the access for current work functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.