Keys are protected throughout generation, transport, custody in use, archive and destruction, with generation and archive media isolated from operational media; R1 uses CCN-authorised algorithms and parameters; R2 uses encryptors meeting the applicable CCN-STIC guide.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.