The many internal and external sources of information that governing and managing I&T depends on, such as strategy documents, incident reports and configuration data, are identified, validated and classified: likely users of knowledge are identified, including information owners who contribute and approve it, and their needs and sources are gathered; the analysis takes in the types of content (policies, rules, procedures, processes, structures, concepts, facts, classifications), the kinds of artefact (records, documents, voice, video) and both structured and unstructured information; sources are classified using a content classification scheme such as the information architecture model; and sources are gathered, collated and validated against criteria such as whether they are understandable, relevant, important, accurate, consistent, complete in integrity, confidential, current and reliable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.