Agencies should log, actively monitor and analyse data access, keep logs showing what data was accessed, how and by whom, protect the logs against modification or erasure, and actively scan for signs of compromise and check systems and platforms for compliance with data security rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.