A control policy covers device authentication, approval, access scope and security settings for PCs, laptops, virtual PCs and tablets used for work; leakage through endpoints is prevented by banning file-sharing software, restricting shares and controlling wireless use; mobile devices are protected against loss and theft; and endpoint controls are checked periodically (PIPA Article 29; Standards for Securing Personal Information Article 6).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.