Written procedures cover how access privileges are granted, revoked and reviewed, with an authorised officer of the CA operator approving them, and set out the specific logical and physical access authorisations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.