Encrypted VPNs are used when communications leave the own security domain; R1 uses CCN-authorised algorithms, R2 hardware VPN devices, R3 certified products; R4 and R5 add CCN-compliant encryptors and encryption of all transmitted information where required.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.