Procedures manage configuration of all hardware and software to prevent misconfiguration; the institution chooses a suitable method such as regularly updated, tested baseline images and configuration management tools; it maintains an up-to-date library of configuration images or templates drawing on vendor recommendations, industry hardening standards and reputable security benchmarks; and it reviews the images regularly so that known threats such as malware, vulnerabilities and common attacker techniques are mitigated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.