For access card data, agencies must choose and implement cryptographic protocols and algorithms, and manage keys, in line with the NZISM requirements set out in Chapter 17, Cryptography.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.