Implement a managed interface for each external telecommunications service with a traffic flow policy, protect the confidentiality and integrity of what crosses it, document each policy exception with its mission need and duration, review exceptions annually, after incidents and after major changes and remove those no longer justified, prevent unauthorised exchange of control plane traffic with external networks, publish information that lets remote networks detect unauthorised control plane traffic from inside, and filter unauthorised control plane traffic from outside.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.