Implement policies that document, review, and modify a user's right of access. NIST recommends periodic recertification and just-in-time elevation for privileged tasks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.