The board of directors or executive committee understands the business criticality of their organisation's systems, including at least a basic understanding of what exists, their value, where they reside, who has access, who might seek access, how they are protected, and how that protection is verified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.