A documented cybersecurity architecture covering IT and OT systems and networks is established and maintained, and it follows the organisation's categorisation and prioritisation of systems and assets.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.