Every quarter or more often, all physical and logical access rights are reviewed to confirm that each person who can reach the decryption environment, the Host System or its software still needs that access for their role.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.