Within a year of signing, show action that measurably increases MFA use across the manufacturer's products, emphasising phishing-resistant MFA (passkeys count even as the only factor) and administrator enrolment. Example approaches are MFA on by default at first registration, seat-belt style nudges and standards-based SSO in the baseline product; progress may be shown through published adoption statistics by user and MFA type, a blog post, or standards work.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.