Malicious Code Controls. Controls to detect and block malicious code (or suitable mitigating controls) must be deployed at both endpoint and network level, covering viruses, ransomware, spyware, worms and trojans (para 53).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.