Participants assess the vulnerability of the prioritised infrastructure to each identified threat or hazard to find weaknesses that could produce consequences of concern, considering accessibility to the public, recognisability, recoverability (dependence on outside services, operating capacity, robustness), susceptibility given security measures in place, proximity to other susceptible assets and redundancy or single points of failure, and framing the findings as problem statements that drive action development.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.