Root ACDFTC

MP-AC-iDF-VTC

Finds a data flow not encrypted by a key from a vault, flowing to a client from or via a service, and the associated auth channel which must not be to a trust intermediary, the data and data access, and process contexts in which the data flows from the client (of which any can cause the threat). The source of the flow is matched twice, so it can be referred to by either role name (FlowsTo or Client) in control strategies.