Where a cloud service holds Level 2 data or higher, access is by default location-aware and risk-based, which can mean limiting access to approved Nigerian IP ranges, authenticating devices, geofencing, requiring a secure VPN or other compensating controls the FPI approves; exceptions for legitimate international access such as diplomatic missions, travelling officials or approved partners are formally justified, time-bound and approved through a documented FPI risk assessment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.