The plan must require documented physical operating environment requirements for IAC assets and systems, documentation from manufacturers, suppliers and integrators of the defence-in-depth measures the external environment must provide, design and implementation of those measures with the personnel responsible for physical security, and risk-appropriate physical protection against natural disasters, malicious attack and accidents; at the Enhanced Profile assets are protected from power and utility failures and telecommunications equipment and cabling from interception, interference and damage.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.