The bank implements a centralised authentication and authorisation system for accessing and administering applications, operating systems, databases, network and security devices and connectivity points, enforcing strong passwords, least privilege and separation of duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.