A financial services company is standardizing its security architecture using the Microsoft Cybersecurity Reference Architectures (MCRA). The CISO wants a single visual model that shows how Microsoft's security capabilities map across identity, endpoints, apps, data, infrastructure, and network — and explicitly demonstrates how Zero Trust user access flows are enforced end-to-end. Which MCRA component should the security architect present to illustrate how signals, policy enforcement, and threat protection integrate to secure user access across all resource types?