Classification criteria are set for information assets used in the cloud service (information systems, security systems, information) and an inventory of identified assets is kept.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.