The plan must require that the integrity of the security requirements of this standard is verified before an asset enters service in a production segregated environment and after maintenance, that executables are protected against unauthorised change, and that any update or patch is verified for authenticity and integrity before entering production; at the Extended Profile assets set outputs to a predetermined state if essential functions cannot be maintained.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.