Approved hardening baselines, grounded in vendor and industry guidance, strip out unnecessary services, insecure settings and weak or unsupported protocols; those baselines are rolled out across infrastructure, operating systems and applications; and departures from them are caught and corrected through scheduled technical checks and, where tooling allows, automated monitoring tuned to each system's criticality and rate of change. Marked across the technical domains.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.