The plan must require an asset management program for cataloguing outside systems that rely on the IAC cyber environment or that it relies on, consistent criteria for the security zone boundaries that define what is external, cataloguing of external systems that communicate with the environment and of dependencies in both directions, and attributes including purpose, identification, organisational owner and location.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.