Documented policies and procedures protect systems, networks, programs, devices and data from unauthorized access or use and ensure confidentiality, integrity and availability, with the responsible employee named and the documentation available on request.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.