Develop, implement, and maintain procedures for the secure disposal of customer information in any format no later than two years after the last date the information is used in connection with the provision of a product or service to the customer, unless retention is required for legitimate business purposes or by law.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.