Enforcement of standards limiting shared accounts to those critical for operations and only if absolutely necessary; where shared accounts are used for operations, access to them is limited through account management using least privilege and separation of duties, and individuals who no longer need access do not know the password.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.