Where VoLTE is offered, protect the IMS core and SIP signaling using TLS or IPsec, and isolate the IMS access network from general data sessions. Verify that calls fall back to circuit switched bearers only when necessary and that fallback is logged.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.