The plan must require that all IAC data at rest is authorised, validated and given confidentiality, integrity and availability protection in line with its classification, and that the risk to stored data that comes from or sits in Baseline Profile zones is identified. At the Enhanced Profile executable files are classified and protected as data at rest and risk to data at rest in Enhanced Profile zones is identified; at the Extended Profile risk to data at rest in Extended Profile zones is identified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.