Cryptographic controls appear in the business asset inventory, and for every cryptographic control it is established where it is used, who is responsible for it and how it is kept up to date.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.