Technical protection separates the public-sector cloud service from the general-customer service so public-sector monitoring, investigation and preventive activities can proceed without interference with data or processes; vulnerabilities that would allow data access by breaching the separation are prevented, mitigated or removed, and unauthorised access is monitored.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.