Establish a program to harden servers, workstations, routers and other systems at levels matched to criticality, with policies and procedures for allow-listing (deny all, allow by exception).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.