Entities under Article 16(1) must identify and implement physical security measures designed on the threat landscape, the Article 30 classification and asset risk, protecting premises and where applicable data centres hosting ICT and information assets from unauthorised access, attacks, accidents and environmental hazards, with environmental protection proportionate to the importance of the premises and the criticality of operations located there.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.