A system owner seeking relief from any NZISM baseline control must have the dispensation granted by the Accreditation Authority for that system. For systems that implement High Assurance Cryptographic Systems (HACS), that authority is the Director-General of the GCSB, or a delegate formally appointed by them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.