Develop and document a system component inventory that accurately reflects the system, includes every component without duplication or components of other systems, is granular enough for tracking and reporting, and records at least installation date, model, serial number, manufacturer, supplier, component type, software owner, version, licence and physical location; review and update it annually.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.