A device whose software cannot be updated can be isolated: removed from the network with only connectivity-related functions lost, or placed in a self-contained environment whose integrity can be assured. Status in Table B.1: R C (3) (recommendation, a should provision; conditional on the device's software components cannot be updated).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.