Monitoring staff have defined roles, skills and tools reflecting governance and reporting requirements, expected threats and network complexity, and know the essential functions they protect. They work from playbooks for quick triage, follow processes meeting internal and external reporting needs, are empowered to investigate beyond fixed processes, and can use all collected logs and shape new data collection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.