A cryptographic policy reflecting legal requirements sets what is encrypted, algorithm strength and usage, and personal and important information is encrypted in storage, transmission and transfer accordingly (PIPA Article 24-2 on resident registration numbers; Standards for Securing Personal Information Article 7).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.