Email body and attachments and routing information are protected, the organisation is protected from spam, malware and mobile code, and email use rules limit private use and include awareness and training.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.