Distributed KIF functions that generate and transfer keys communicate over mutually authenticated channels, and every key transfer between them meets Control Objective 3, as 32-8.1 to 32-8.7 set out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.