At set intervals, and whenever a defined trigger such as a system change or an external event occurs, the organisation checks whether its systems and networks still conform to the cybersecurity architecture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.