Logical and physical access controls are implemented, where feasible and at least in an ad hoc way, to protect assets important to the delivery of the function.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.