For CONFIDENTIAL, SECRET and TOP SECRET systems, for data imported into each security domain, gateway imports included, agencies must review the whole set of data transfer logs at least once a month.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.