Accounts locked under #7(d) may be released by the system after 30 minutes, or by an employee where the system gives readily available information providing reasonable assurance that the user is authorized, or by other Board-approved means; employee involvement in release is described in the written system of internal control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.