Secure software development environments, including administratively separate build environments; auditing trust relationships; multi-factor, risk-based authentication and conditional access across the enterprise; documenting and minimizing dependencies on enterprise products that are part of the environments used to develop, build and edit software; encryption of data; and monitoring operations and alerts and responding to attempted and actual cyber incidents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.