All internal and external employees, on commencement of employment or on a job change, have been made aware of their information security responsibilities and can easily find the information security regulations and instructions applying to them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.