Agencies should use audits both to account for all cryptographic system material and to confirm that the security measures agreed in the KMP are actually being followed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.