The Rules apply to responsible entities for the critical infrastructure asset classes specified in the Rules (including critical electricity, gas, water and sewerage, energy market operator, data storage or processing, financial market infrastructure, food and grocery, hospital, domain name system, broadcasting, and certain transport assets). A responsible entity for a specified asset must adopt and maintain a CIRMP.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.