Requirement 0158 (Part Five: Personnel, section 19.5.1 Personnel Security Vetting Process; applies to Authorised Vetting Agencies; dated 31 October 2024; retained from Release 2025): Where concerns identified during vetting or the security clearance suitability assessment are not sufficient to deny a clearance and the risks can be managed through conditions, the Authorised Vetting Agency must identify the clearance conditions, give the sponsoring entity information about the concerns to inform a risk assessment, and only issue a conditional clearance if the Accountable Authority and the clearance subject accept the conditions (the Accountable Authority may delegate this to the Chief Security Officer, who must then notify the Accountable Authority of the conditions). Conditions manage concerns not sufficient to deny; the Accountable Authority (or delegated CSO, who then notifies the Accountable Authority) and the subject must accept them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.