The hardware, and the passwords or authentication codes, used for loading keys or signing authenticated applications are held under dual control within a secure environment and are managed so that no single individual can enable clear-text keys or components to be loaded; each individual authentication mechanism does not itself need dual control, and for POI loading the secure room of Requirement 32-9 also applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.