Per SOX 404 + COBIT: ITGC including access management + change management + computer operations + program development + backup + recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.