Besides business functions the bank specifies security requirements for access control, authentication, transaction authorisation, data integrity, activity logging, audit trail, session management, security event tracking and exception handling during initial and ongoing development, acquisition and implementation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.