Criteria are set for detecting cybersecurity events, for example what counts as an event and where to look for them, related to the requirements of IT, OT and information assets.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.