The CIRMP must identify each hazard where there is a material risk that the occurrence of the hazard could have a relevant impact on the critical infrastructure asset. A risk is material where it could materially affect the availability, integrity, reliability or confidentiality of the asset, including through a cascading or supply-chain effect.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.