Where log-on tokens such as smart cards are used they require a usage-authentication mechanism, a biometric or a PIN or passphrase of at least ten alphanumeric characters or equivalent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.