The process owner has written the retention periods of every kind of information and every information system into selection lists, having regard to what the entity aims to do and to law and regulation, the Public Records Act and privacy rules among them, has implemented those periods in practice and periodically tests their effectiveness.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.