A key-injection facility that uses PC-based key-loading software or similar devices such as modified PEDs, where clear-text keys or components exist in memory outside an SCD's secure boundary, implements the additional controls of 13-9.1 to 13-9.4; since 1 January 2021 no entity loading keys for others may use such PC-based methods, and since 1 January 2023 neither may an entity loading only devices it processes for.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.