Apply identity, authentication, and privileged access controls in line with IM8 requirements, including strong authentication for sensitive access, role-based access control, and oversight of privileged accounts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.