Each asset is accounted for and has a suitable responsible party who ensures its security controls are implemented, configuration standards are met and its lifecycle is managed. Asset credentials sit with suitable responsible parties who manage them under authorisation and authentication controls, and a recovery procedure covers lost or irretrievable asset credentials.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.