The area put forward for certification has to be a space that can be closed off completely by its walls, floors, ceilings, doors and windows, and every door and window can be locked or secured in some other way. The guideline explains that together these surfaces form the containment barrier, protecting every space outside the facility (other parts of the building included) and the environment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.