A secure transfer policy applies when personal or important information is sent to outside organisations, and where it is exchanged routinely between organisations, agreements set management responsibility, transfer method and technical protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.