Put change controls in place for operating systems, for network configuration and topology and for network security, covering changes to IDS/IPS, to traffic control and monitoring, to new systems and to upgrades.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.